PT-2026-26977
CVE-2026-4115
·
Published
2026-01-01
·
Updated
2026-07-09
Description by
CVSS 3.1
3.7
LowMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
PuTTY version 0.83
Description
An issue exists in the Ed25519 Signature Handler component within the
eddsa verify() function of the crypto/ecc-ssh.c file. This flaw allows for the improper verification of cryptographic signatures, which could be exploited remotely. The attack is characterized by high complexity and is considered difficult to execute.Recommendations
Apply the patch identified as af996b5ec27ab79bae3882071b9d6acf16044549 for version 0.83.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾