Lucene search
+L

1 matches found

OSV
OSV
added 2026/09/22 5:13 p.m.6 views

CVE-2026-77605 Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution)

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...

7.8CVSS6AI score
SaveExploits0References6
Rows per page
Query Builder