$ cve CVE-2019-9898 JSON

CVE-2019-9898

9.8

CRITICAL · CVSS 3.0 · EPSS 3.9% (pctl 90)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71.

CVSS	9.8 (CRITICAL, v3.0)
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	3.94% — more likely to be exploited than 90% of all CVEs
Weakness	CWE-330
On CISA KEV	no
Public exploit	none known
Published	2019-03-21
Last modified	2026-06-17