https://notepad-plus-plus.org/downloads/v8.9.6 · Notepad++ 8.9.6 · Arbitrary Code Execution
Affects https://notepad-plus-plus.org/downloads/v8.9.6Source Exploit-DB RSS Feed
Not known to be exploited · public exploit available (Exploit-DB).
Data as of 25 Oct 2026, 19:02 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 0.6% chance of exploitation in 30 days – higher than 49% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
Public on cve.org; its publication date is not in this record
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: evidence found.
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-25.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| https://notepad-plus-plus.org https://notepad-plus-plus.org/downloads/v8.9.6 | Affected
| Fixed in– |
AI-suggested
Until an official fix is released, users should exercise caution when opening untrusted files with Notepad++ 8.9.6 or earlier and consider using alternative text editors or restricting Notepad++ usage in sensitive environments.
Description
Notepad++ 8.9.6 - Arbitrary Code Execution
Indicators of compromise
Exploit source code
# Exploit Title: Notepad++ 8.9.6 - Arbitrary Code Execution
# Date: 2026-05-30
# Exploit Author: Kavin Jindal (Avyukt Security) https://www.linkedin.com/in/kavin-jindal/
# Vendor Homepage: https://notepad-plus-plus.org
# Software Link: https://notepad-plus-plus.org/downloads/v8.9.6/
# Version: <= 8.9.6
# Tested on: Windows 10/11
# CVE: CVE-2026-48778
# Reference: https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-7hm3-wp5q-ccv9
#
# Description:
# Notepad++ reads <GU…