CVE-2026-48850

Impact

PuTTY 0.72 before 0.84 has a double free in RSA KEX.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://lists.tartarus.org/pipermail/putty-announce/2026/000042.html
• https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/rsakex-double-free.html