Notepad++
In 7 briefs, most recently 18 February 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
1 Notepad++ vulnerability is on CISA's list of vulnerabilities exploited in the wild. Most recent:
- CVE-2025-15556 Notepad++ Download of Code Without Integrity Check Vulnerability
Coverage in DanSec Daily
- Eurail data breach, Poland energy wiper attacks, and a critical Dell RecoverPoint zero-day (CVE-2026-22769) exploited by Chinese state hackers UNC6201.
- Odido breach hits 6 million customers, BeyondTrust RS/PRA CVE-2026-1731 exploited within 24 hours of PoC, and Chrome extensions steal Meta Business Suite …
- Mexican government breach claim, Notepad++ update hijacking distributing a backdoor, and a critical n8n flaw allowing host takeover.
- Notepad++ supply chain attack, ShinyHunters' Panera Bread leak of 5.1M records, and actively exploited SolarWinds Web Help Desk RCE added to CISA KEV.
- Lotus Blossom hijacks Notepad++ update channel, Panera Bread breach exposes 5.1M accounts, and 341 malicious OpenClaw AI skills found.
- The Coupang breach (33.7M customers), Akira's Fieldtex claim, and the exploited Gladinet CentreStack and React2Shell (CVE-2025-55182) flaws.
- The Gogs zero-day hitting 700+ servers, the LastPass £1.2M ICO fine, Gladinet CentreStack exploitation, and WIRTE's AshTag malware campaign.