Skip to content

CyberSIXT Search

Vendor

Notepad++

CVEs tracked · all time: 5
in CISA KEV · all time: 1
articles · since 11 Sep: 0
articles · all time: 6

No articles in the last 45 daysThe latest: SecurityOnline, Mon 1 Jun, 02:48 UTC.See the full timeline

Products: Notepad++, notepad-plus-plus

CVEs

5 CVEs

CVE-2025-15556Notepad++ Download of Code Without Integrity Check VulnerabilityCVSS7.7HighExploited1.8%EPSS3articles

CVE-2026-48778notepad-plus-plus vulnerabilityCVSS7.8High–Not in KEV0.6%EPSS1article

CVE-2026-48800Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand InjectionCVSS7.8High–Not in KEV0.2%EPSS1article

CVE-2026-48770notepad-plus-plus vulnerabilityCVSS5.0Medium–Not in KEV0.1%EPSS1article

CVE-2026-25926Notepad++ has an Untrusted Search PathCVSSUnrated–Not in KEV0.3%EPSS2articles

Coverage

6 articles, all timeFull timeline RSS feed

1 JunHackers can exploit Notepad++ flaws to run code and crash systemsSecurityOnline
18 FebNotepad++ patches flaw used to hijack update systemSecurity Affairs
18 FebNotepad++ Fixes Hijacked Update Mechanism Used to Deliver Targeted MalwareThe Hacker News
13 FebCISA Warns of Exploited SolarWinds, Notepad++, Microsoft VulnerabilitiesSecurityWeek
13 FebResearchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 VulnerabilityThe Hacker News
13 FebU.S. CISA adds SolarWinds Web Help Desk, Notepad++, Microsoft Configuration Manager, and Apple devices flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs · first in our coverage