Skip to content
OpenAdvisories
High WID-SEC-2026-2312 5 CVEs

Notepad++: Mehrere Schwachstellen

Published Jul 13, 2026 · Updated Aug 17, 2026 · Revision 3 · de-DE

Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Notepad++ ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.

Product

Notepad++ ist ein Open-Source-Editor, der viele Programmiersprachen unter Microsoft Windows unterstützt.

Vulnerabilities 5

  • High 8.1
    CVE-2026-57233

    Notepad++: Path Traversal (Zip Slip) in WinGup Plugin Extraction

    Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the WinGup decompress function joins untrusted ZIP entry names to unzipDestTo without canonical containment validation, allowing an entry such as ../mimeTools/mimeTools.dll to overwrite a…

    notepad-plus-plus notepad-plus-plus
  • High 7.8
    CVE-2026-54758

    Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrs

    Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a Notepad++ variable name between $( and ) into the fixed-size wchar_t str[MAX_P…

    notepad-plus-plus notepad-plus-plus
  • Medium 5.4
    CVE-2026-71858

    Notepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command Execution

    Notepad++ is a free and open-source source code editor. Prior to 8.9.7, macros loaded from an attacker-controlled shortcuts.xml bypass the HMAC validation applied to UserDefinedCommands and can invoke Scintilla actions and the internal Open in Default Viewer …

    notepad-plus-plus notepad-plus-plus
  • Medium 5.4
    CVE-2026-73250

    Notepad++: Install-time PowerShell command injection through installation path

    Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$INSTDIR` from PowerEditor/installer/nppSetup.nsi into a PowerShell `-Command` stri…

    notepad-plus-plus notepad-plus-plus
  • Medium 5.1
    CVE-2026-52886 Public exploit

    Notepad++: session.xml backupFilePath starts_with Bypass

    Notepad++ is a free and open-source source code editor. Prior to 8.9.7, Notepad++ validates the backupFilePath attribute from session.xml with std::wstring::starts_with against the expected backup directory without path normalization, allowing parent-director…

    notepad-plus-plus notepad-plus-plus

Revision history

  1. #3

    Referenz(en) aufgenommen: EUVD-2026-60375, EUVD-2026-60374, EUVD-2026-60372, CVE-2026-71858, EUVD-2026-60373

  2. #2

    Referenz(en) aufgenommen: CVE-2026-73250, EUVD-2026-57017

  3. #1

    Initiale Fassung

References