Command and Code Injection

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreterCVE-2026-48778notepad-plus-plus · CVSS 7.8 · 0.6% likelycovered by CyberSIXT

   CWE-78

2. Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand InjectionCVE-2026-48800notepad-plus-plus · CVSS 7.8 · 0.2% likelycovered by CyberSIXT

   CWE-78

3. Notepad++: Install-time PowerShell command injection through installation pathCVE-2026-73250notepad-plus-plus · CVSS 5.4 · 0.2% likely

   CWE-77

4. Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialogCVE-2026-85288notepad-plus-plus · CVSS 6.7 · 0.1% likely

   CWE-78

5. Notepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command ExecutionCVE-2026-71858notepad-plus-plus · CVSS 5.4 · 0.1% likely

   CWE-78

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.