PT-2026-44374 · Notepad++ · Notepad++

Published 2026-05-26 · Updated 2026-05-30 · CVE-2026-48770

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.6.1

Description An issue in the inter-process communication mechanism involves an out-of-bounds memory read, which could lead to a denial of service. Additionally, flaws in the handling of configuration files may allow for remote code execution.

Recommendations Update to version 8.9.6.1.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-07492

CVE-2026-48770

Affected Products

Notepad++

References · 13

• https://bdu.fstec.ru/vul/2026-07492 · Security Note
• https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-r39g-3mcw-xcg2 · Note
• https://twitter.com/threatcluster/status/2059945367492251734 · Twitter Post
• https://community.notepad-plus-plus.org/topic/27548/notepad-release-8.9.6.1 · Note
• https://reddit.com/r/CVEWatch/comments/1tqx4fa/top_10_trending_cves_29052026 · Reddit Post
• https://acn.gov.it/portale/w/notepad-poc-pubblici-per-le-cve-2026-48800-cve-2026-48778-e-cve-2026-48770 · Note
• https://t.me/CSIRT_italia/3563 · Telegram Post
• https://notepad-plus-plus.org/news/v8961-released · Note
• https://twitter.com/piedpiper1616/status/2060544381585948861 · Twitter Post
• https://twitter.com/NullSecurityX/status/2060792603633737822 · Twitter Post
• https://t.me/pentestingnews/74463 · Telegram Post
• https://thecyberexpress.com/notepad-cve-2026-48770-vulnerability · Note
• https://t.me/ZerodayAlert/720 · Telegram Post