[NEW] [high] Notepad++: Multiple vulnerabilities

high

An attacker can exploit multiple vulnerabilities in Notepad++ to bypass security measures, disclose Windows authentication credentials, delete or manipulate files, execute arbitrary code, or cause denial-of-service conditions.

CSIRTS triage

vendor: Notepad++product: Notepad++Authentication bypass Information disclosure Path traversal Remote code execution Denial of service

What: Multiple vulnerabilities allow authentication bypass, credential disclosure, file manipulation, arbitrary code execution, and denial of service.
Who is affected: All users of Notepad++ on Windows systems.
Urgency: High priority; multiple attack vectors including unauthenticated RCE and credential theft warrant immediate action.
Action: Update to the latest version of Notepad++ immediately.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Notepad++

Get an email when a new Notepad++ advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: high
Published: 2026-08-24
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2968

Recent advisories for Notepad++

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

high[NEW] [high] Notepad++: Multiple vulnerabilitiescert-bund · 2026-08-18
unknownCVE-2026-71858: Notepad++ is a free and open-source source code editor. Prior to 8.9.7, macros loaded from an …nvd · 2026-08-17
highCVE-2026-57233: Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the WinGup decompress …nvd · 2026-08-17
highCVE-2026-54758: Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironme…nvd · 2026-08-17
unknownCVE-2026-52886: Notepad++ is a free and open-source source code editor. Prior to 8.9.7, Notepad++ validates th…nvd · 2026-08-17
unknownCVE-2026-73250: Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows …nvd · 2026-08-11

[NEW] [high] Notepad++: Multiple vulnerabilities

CSIRTS triage

Details

Recent advisories for Notepad++

More from CERT-Bund (BSI) Security Advisories