CVE Catalog
CVE-2026-48851
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.22%
13th percentile - higher than 13% of all known CVEs
Summary
In PuTTY versions 0.77 through 0.83, the PuTTY icon is used as a trust indicator for TELNET data, but the trust status is not cleared between proxy authentication and the main session.
Risk Assessment
Users may be tricked into trusting data from an untrusted source, potentially leading to phishing attacks or session hijacking.
Recommendation
Update PuTTY to version 0.84 or later, which contains the fix.
Original NVD description (English source)
PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.