{"vulnerability": "cve-2026-4877", "sightings": [{"uuid": "6e353b71-8f56-46e0-bab5-5466479b08fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://t.me/GithubRedTeam/86575", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48778\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a XK3NF4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-30 17:52:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNotepad++ RCE via config.xml commandLineInterpreter\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-30T18:00:04.000000Z"}, {"uuid": "29f527f4-0b90-4a88-9135-eece466c2e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4877", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhy6anxugc22", "content": "", "creation_timestamp": "2026-03-26T17:52:45.791523Z"}, {"uuid": "273dea79-48ba-438e-af53-0eddb7969158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-le-cve-2026-48800-cve-2026-48778-e-cve-2026-48770", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-48800, CVE-2026-48778 e CVE-2026-48770 \u2013 gi\u00e0 sanata dal vendor \u2013 presenti nel software \u201cNotepad++\u201d, noto editor di testo avanzato per Windows. Tali vulnerabilit\u00e0, qualora sfruttate, potrebbero consentire ad un utente malintenzionato con accesso locale di eseguire codice arbitrario e compromettere la disponibilit\u00e0 del servizio sui sistemi target.", "creation_timestamp": "2026-05-28T12:51:30.000000Z"}, {"uuid": "fc5b05c9-02bb-4b30-8e6f-759b601eb14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48770", "type": "seen", "source": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-le-cve-2026-48800-cve-2026-48778-e-cve-2026-48770", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-48800, CVE-2026-48778 e CVE-2026-48770 \u2013 gi\u00e0 sanata dal vendor \u2013 presenti nel software \u201cNotepad++\u201d, noto editor di testo avanzato per Windows. Tali vulnerabilit\u00e0, qualora sfruttate, potrebbero consentire ad un utente malintenzionato con accesso locale di eseguire codice arbitrario e compromettere la disponibilit\u00e0 del servizio sui sistemi target.", "creation_timestamp": "2026-05-28T12:51:30.000000Z"}, {"uuid": "97779784-873f-41db-af99-e034cb2924a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://t.me/GithubRedTeam/86539", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48778-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kavin-jindal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-30 12:16:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-30T13:00:04.000000Z"}, {"uuid": "d1f9a665-dd63-429f-b1de-c6188464d23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mmzk5ms7vf2l", "content": "\ud83d\udd12 Two RCE vulnerabilities in Notepad++ (CVE-2026-48778, CVE-2026-48800)\n\nTwo high-severity RCE vulnerabilities (CVE-2026-48778, CVE-2026-48800) have been discovered in Notepad++ v8....\n\nhttps://tinyurl.com/mvjtt973 #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-05-29T22:04:26.702426Z"}, {"uuid": "b85644e7-ac35-42c9-af85-1a416bb73429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mn32y62gra2x", "content": "Notepad++ vulnerabilities could enable arbitrary code execution on Windows systems (CVE-2026-48778 and CVE-2026-48800) #patchmanagement", "creation_timestamp": "2026-05-30T12:38:16.819918Z"}, {"uuid": "5fc9175d-c26e-4db4-a0d6-55024bbe76df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mn6zyh5flz2u", "content": "Top 3 CVE for last 7 days:\nCVE-2026-0257: 28 interactions\nCVE-2026-48778: 21 interactions\nCVE-2026-48095: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48778: 20 interactions\nCVE-2026-0257: 11 interactions\nCVE-2026-8732: 3 interactions\n", "creation_timestamp": "2026-06-01T02:31:11.811835Z"}, {"uuid": "bdcb7935-1441-4b39-a3ea-1a40105ac933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/notepad-plus-plus.org/post/3mn5rlokl3c2g", "content": "Notepad++ new release v8.9.6.2 fixes a bypass scenario in the previously addressed vulnerability (CVE-2026-48778) that was not fully resolved:\nnotepad-plus-plus.org/news/v8962-r...", "creation_timestamp": "2026-05-31T14:28:14.892505Z"}, {"uuid": "2c0db4b0-ea22-49ed-a30f-2873f5d6c52d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48770", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/116674085522619236", "content": "Si vous utilisez Notepad++, pensez \u00e0 v\u00e9rifier votre version : la 8.9.6.2 corrige plusieurs vuln\u00e9rabilit\u00e9s, dont certaines pouvant mener \u00e0 l\u2019ex\u00e9cution de code arbitraire. \ud83d\udc47 https://notepad-plus-plus.org/news/v8961-released/\u2b07\ufe0f https://notepad-plus-plus.org/news/v8962-released/\nUn attaquant pourrait tirer parti de fichiers de configuration ou de raccourcis sp\u00e9cialement modifi\u00e9s pour faire ex\u00e9cuter des commandes \u00e0 notre insu dans certains sc\u00e9narios\nUn PoC public circule d\u00e9j\u00e0, ce qui r\u00e9duit le d\u00e9lai entre la divulgation et les tentatives d\u2019exploitation opportunistes.\u2b07\ufe0f https://github.com/atiilla/Notepad-8.9.6-PoC\nDans les news\u2b07\ufe0f https://thecyberexpress.com/notepad-cve-2026-48770-vulnerability/\n#CyberVeille #NotepadPlusPlus", "creation_timestamp": "2026-06-01T09:14:21.097138Z"}, {"uuid": "17420b7b-2f4e-4724-a389-10bb584257e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48770", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116673056260872400", "content": "It is possible to see elevated activities targeting Notepad++ (CVE-2026-48770) https://vuldb.com/vuln/367177/cti", "creation_timestamp": "2026-06-01T04:52:35.223327Z"}, {"uuid": "311ecd17-2735-4ed3-8799-9a4b454dfbaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnbkhiii6g2s", "content": "Top 3 CVE for last 7 days:\nCVE-2026-0257: 34 interactions\nCVE-2026-48778: 22 interactions\nCVE-2026-48095: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-41089: 12 interactions\nCVE-2026-8732: 9 interactions\nCVE-2026-44962: 8 interactions\n", "creation_timestamp": "2026-06-02T02:31:15.891369Z"}, {"uuid": "282d6a21-1fcf-4d19-bcc9-a0ab2b295648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "Telegram/l1vE9HUrzRN3YgnBjoD0X2bVt12uBAEnmzNbhS5dacgQt4U", "content": "", "creation_timestamp": "2026-05-30T21:00:04.000000Z"}, {"uuid": "1fbd9b0c-d82f-4343-8846-3a94ecacacc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "Telegram/11w8RI0cRJ2Y_5Y75akm2L08lgCZSwunoJ6IZ7hlmRoONww", "content": "", "creation_timestamp": "2026-05-30T19:00:10.000000Z"}, {"uuid": "4c36d29e-6ac1-4bd6-982b-50bb36abab37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnglfbhxsc2c", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 134 interactions\nCVE-2026-0257: 42 interactions\nCVE-2026-48778: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-48595: 7 interactions\nCVE-2026-42897: 7 interactions\nCVE-2026-42945: 5 interactions\n", "creation_timestamp": "2026-06-04T02:31:13.915984Z"}, {"uuid": "3a37fb93-8a6e-4727-ad95-3829b4204e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mne2wpe5722x", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 127 interactions\nCVE-2026-0257: 42 interactions\nCVE-2026-48778: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-48595: 127 interactions\nCVE-2026-46243: 12 interactions\nCVE-2026-0257: 8 interactions\n", "creation_timestamp": "2026-06-03T02:31:25.801854Z"}, {"uuid": "60aadf67-5591-4d65-9a50-abf5185c109b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnj3tf3oaw2f", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-0257: 43 interactions\nCVE-2026-48778: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-49858: 11 interactions\nCVE-2026-20230: 6 interactions\nCVE-2026-10737: 4 interactions\n", "creation_timestamp": "2026-06-05T02:30:47.115463Z"}, {"uuid": "d51fe5e1-36f6-452c-85bb-4c4985997745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48778", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116696141985383127", "content": "Attention, elevated activities detected targeting Notepad++ (CVE-2026-48778) https://vuldb.com/vuln/367178/cti", "creation_timestamp": "2026-06-05T06:43:36.817858Z"}]}