CVE-2026-48851 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	3.1 LOW	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 13.27%

Affected Products (NVD)

Vendor	Product	Version
putty	putty	0.77 ≤ 𝑥 < 0.84

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

putty

bookworm	no-dsa
bookworm (security)	vulnerable
bullseye	postponed
bullseye (security)	vulnerable
forky	0.84-1 fixed
sid	0.84-1 fixed
trixie	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

putty

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored
resolute	needs-triage
xenial	needs-triage

Common Weakness Enumeration

CWE-451 - User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

References

https://lists.tartarus.org/pipermail/putty-announce/2026/000042.html

https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/telnet-trust-sigil.html