PuTTY 0.84 Released With Fix for SSH KEX Crashes and Telnet Prompt Spoofing Flaw

Cybersecuritynews •Abinaya • May 26, 2026

PuTTY 0.84 has been released with fixes for multiple minor security flaws, including issues that could trigger SSH key exchange crashes and a Telnet prompt spoofing weakness. While these vulnerabilities are considered low severity, they highlight how even small flaws in cryptographic handling and session logic can be abused in specific attack scenarios, particularly by […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PuTTY 0.84 Fixes SSH KEX Crashes and Telnet Spoofing Vulnerabilities PuTTY 0.84 has been released, addressing three minor security vulnerabilities related to SSH key exchange crashes and Telnet prompt spoofing. These flaws could allow remote attackers to crash the PuTTY client or deceive users during insecure sessions. Although classified as low severity, they impact critical components of the software, which is widely used for secure shell access. Users of PuTTY are advised to update to the latest version to mitigate these risks. The vulnerabilities highlight the importance of maintaining updated software to protect against even minor threats that can be exploited in specific scenarios. 2 sources 28

Extracted Entities

Tools (1)

Putty