https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:36:29 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-15900 bdu:2025-15900 https://cve.radiocsirt.org/vuln/bdu:2025-15900 https://cve.radiocsirt.org/vuln/euvd-2026-274502 EUVD-2026-274502 https://cve.radiocsirt.org/vuln/euvd-2026-274502 https://cve.radiocsirt.org/vuln/fkie_cve-2025-15556 <p>Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traffic can cause the updater to download and execute an attacker-controlled installer, resulting in arbitrary code execution with the privileges of the user.</p> <p>Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traffic can cause the updater to download and execute an attacker-controlled installer, resulting in arbitrary code execution with the privileges of the user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-15556 https://cve.radiocsirt.org/vuln/ghsa-cqx4-h5ph-3xj9 <p>Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traffic can cause the updater to download and execute an attacker-controlled installer, resulting in arbitrary code execution with the privileges of the user.</p> <p>Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traffic can cause the updater to download and execute an attacker-controlled installer, resulting in arbitrary code execution with the privileges of the user.</p> https://cve.radiocsirt.org/vuln/ghsa-cqx4-h5ph-3xj9 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2802 <p>Ein entfernter, anonymer Angreifer in einer Man in the Middle Position kann eine Schwachstelle in Notepad++ ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer in einer Man in the Middle Position kann eine Schwachstelle in Notepad++ ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2802