buildroot ▾
›
2025.02.x ▾
›
vulnerability
›
CVE-2026-48851
Component Overview
Vulnerability Overview
Name
CVE-2026-48851
Source
NVD (
link
)
Debian (
link
)
Description
PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.
CWEs
CWE-451
Published Date
May 25, 2026
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://lists.tartarus.org/pipermail/putty-announce/2026/000042.html
Release Notes
https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/telnet-trust-sigil.html
Patch
Analysis
#
Affected Component
Analysis
putty
Patched
Vulnerability Ratings
#
3.1
CVSSv31
NaN
other
Others affected component
#
Name
Project
Project Version
Version
Status
putty
buildroot
master
0.84
Not Affected
Resolved with patches
#
putty (buildroot:2025.02.x)
#
Title
Author
Resolve
1
Non-SSH backends: delay setting trust status to false.
Simon Tatham <anakin@pobox.com>
CVE-2026-48851