PT-2026-58887 · Undefined · Undefined
Published
2026-07-15
·
Updated
2026-07-15
·
CVE-2026-54758
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
🚨 Notepad++ v8.9.7 patches 5 security flaws, including a PowerShell command injection bug in the installer
Update now — a tampered installer could hand attackers full system compromise.
🔹 PowerShell injection during install enables arbitrary command execution
🔹 CVE-2026-54758: stack buffer overflow risks memory corruption & possible RCE
🔹 Zip Slip flaw in the updater lets attackers overwrite arbitrary files
🔹 Auto-update rolls out in ~2 weeks — manual update recommended for instant protection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined