CVE-2026-48851
CVE-2026-48851
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.
CVSS 3.1 · Low · EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
putty
- Versions
- ≥ 0.77, < 0.84: Affected (custom)
Update to 0.84
putty Debian:12
- Versions
- 0.78-2
- 0.78-2+deb12u1
- 0.78-2+deb12u2
- 0.78-3
- 0.79-1
- 0.80-1
- 0.81-1
- 0.81-2
- 0.81-3
- 0.82-1
- 0.82-2
- 0.83-1
- 0.83-2
- 0.83-3
- 0.84-1
- 0.85-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Debian:13
- Versions
- 0.83-3
- 0.84-1
- 0.85-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Debian:14
- Versions
- 0.83-3
- Affected ranges
- ECOSYSTEM: < 0.84-1
Update to 0.84-1
putty Ubuntu:16.04:LTS
- Versions
- 0.65-2
- 0.66-1
- 0.66-2
- 0.66-3
- 0.66-4
- 0.67-1
- 0.67-2
- 0.67-3build0.16.04.1
- 0.67-3+deb9u1build0.16.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:18.04:LTS
- Versions
- 0.70-1
- 0.70-2
- 0.70-3
- 0.70-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:20.04:LTS
- Versions
- 0.72-1
- 0.73-1
- 0.73-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:22.04:LTS
- Versions
- 0.75-3
- 0.76-1
- 0.76-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:24.04:LTS
- Versions
- 0.78-3
- 0.79-1
- 0.80-1
- 0.80-1build2
- 0.80-1build3
- 0.81-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:25.10
- Versions
- 0.83-2
- 0.83-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:26.10
- Versions
- 0.83-3build1
- 0.84-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:26.04:LTS
- Versions
- 0.83-3
- 0.83-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published