PT-2026-35357 · Notepad++ · Notepad++

Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-3008

Mitre

CVSS v3.1

6.6

Medium

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Successful exploitation of the string injection vulnerability could allow an attacker to obtain memory address information or crash the application.

Exploit

Fix

Related Identifiers

CVE-2026-3008

Affected Products

Notepad++

References · 6

• 🔥 https://github.com/llgsjsm/cve-2026-3008 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3008 · Security Note
• https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17960 · Note
• https://llgsjsm.github.io/cve-2026-3008 · Note
• https://community.notepad-plus-plus.org/topic/27500/notepad-v8-9-4-release-candidate · Note
• https://csa.gov.sg/alerts-and-advisories/alerts/al-2026-044 · Note