Malwarehigh
Notepad++ Fixes Hijacked Update Mechanism Used to Deliver Targeted Malware
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-15556 | Unverified updates in Notepad++ WinGUp updater allow arbitrary code execution | 7.7 | 2% | KEV | KEV |
| CVE-2026-25926 | Notepad++: An Unsafe Search Path vulnerability (CWE-426) exists in versions prior to 8.9.2 when launching Windows Explorer without an… | 7.3 | <1% | PoC |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | notepad-plus-plus.org | fication of the signed XML returned by the update server at notepad-plus-plus[.]org. In addition to these enhancements, security-focused chan |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Feb 18, 2026 Vulnerability / Application Security Notepad++ has released a security fix to plug gaps that were exploited by an advanced threat actor from China to hijack the software update mechanism to selectively deliver malware to targets of interest. The version 8. 9.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.