CVE-2026-48852 - PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification

LOW

PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification

Published May 25, 2026

3.7

LOW

CVSS 3.1

EPSS 0.35%

PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0.71	affected	<0.84

No remediation recorded yet.

Weaknesses (1)

CWE-617

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31735		Advisory
https://lists.tartarus.org/pipermail/putty-announce/2026/000042.html		Release Notes
https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/ecdsa-remotely-triggerable-assertion.html		PatchVendor Advisory