Notepad++: Schwachstelle ermöglicht Codeausführung
WID-SEC-2025-2802 · first 10.12.2025 · updated 13.02.2026 · CVSS 7,5
What it is about
Notepad++ ist ein Open-Source-Editor, der viele Programmiersprachen unter Microsoft Windows unterstützt. Ein entfernter, anonymer Angreifer in einer Man in the Middle Position kann eine Schwachstelle in Notepad++ ausnutzen, um beliebigen Programmcode auszuführen.
Under what conditions?
Over the network and without logging in. This is the most dangerous combination: attackers can scan reachable devices automatically.
What can happen in the worst case
An attacker could use the vulnerability to
- beliebigen Programmcode auszuführen
Am I affected?
Affected according to the BSI:
- Open Source Notepad++ <8.8.9
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Open Source Notepad++ 8.8.9
Is the vulnerability already being exploited?
- CVE-2025-15556: exploited in the wild according to CISA, in the catalogue since 12.02.2026.
Information and sources
- Original BSI advisory (WID)
- Notepad++ Release 8.8.9 vom 2025-12-09 notepad-plus-plus.org
- CISA KEV vom 2026-02-12 www.cisa.gov
CVE: CVE-2025-15556
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.