PuTTY Vulnerability: Insecure Trust Indication in TELNET Sessions

CVE-2026-48851

What is CVE-2026-48851?

PuTTY versions 0.77 through 0.83 utilize a trust icon to signify trustworthiness during TELNET session data transfer. However, this trust indication is inadequately cleared between proxy authentication and the main session, allowing potential attackers to exploit the session. This oversight could lead to confusion regarding the actual trust status of data being communicated, resulting in potential security risks.

References