{"metadata": {"vulnerability": "CVE-2026-48770", "count": 21, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-05-22T19:39:05.356Z", "date_only": false, "value": "2026-05-22T19:39:05.356Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-48770", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-26T22:00:00Z", "date_only": false, "value": "2026-05-26T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1679", "record": "WID-SEC-W-2026-1679", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-26T22:00:00Z", "date_only": false, "value": "2026-05-26T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1679", "record": "WID-SEC-W-2026-1679", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T22:00:00Z", "date_only": false, "value": "2026-05-26T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1679", "record": "WID-SEC-W-2026-1679", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T22:00:00Z", "date_only": false, "value": "2026-05-26T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1679", "record": "WID-SEC-W-2026-1679", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-05-27T09:10:35.759Z", "date_only": false, "value": "2026-05-27T09:10:35.759+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1679", "record": "WID-SEC-W-2026-1679", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-05-28T12:51:30Z", "date_only": false, "value": "2026-05-28T12:51:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-le-cve-2026-48800-cve-2026-48778-e-cve-2026-48770", "record": "CVE-2026-48770", "field": "creation_timestamp", "uuid": "fc5b05c9-02bb-4b30-8e6f-759b601eb14e", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-48800, CVE-2026-48778 e CVE-2026-48770 \u2013 gi\u00e0 sanata dal vendor \u2013 presenti nel software \u201cNotepad++\u201d, noto editor di testo avanzato per Windows. Tali vulnerabilit\u00e0, qualora sfruttate, potrebbero consentire ad un utente malintenzionato con accesso locale di eseguire codice arbitrario e compromettere la disponibilit\u00e0 del servizio sui sistemi target.", "url": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-le-cve-2026-48800-cve-2026-48778-e-cve-2026-48770"}, {"timestamp": "2026-06-01T04:52:35.223Z", "date_only": false, "value": "2026-06-01T04:52:35.223327Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/116673056260872400", "record": "CVE-2026-48770", "field": "creation_timestamp", "uuid": "17420b7b-2f4e-4724-a389-10bb584257e5", "content": "It is possible to see elevated activities targeting Notepad++ (CVE-2026-48770) https://vuldb.com/vuln/367177/cti", "url": "https://infosec.exchange/users/vuldb/statuses/116673056260872400"}, {"timestamp": "2026-06-01T09:14:21.097Z", "date_only": false, "value": "2026-06-01T09:14:21.097138Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/decio/statuses/116674085522619236", "record": "cve-2026-48770", "field": "creation_timestamp", "uuid": "2c0db4b0-ea22-49ed-a30f-2873f5d6c52d", "content": "Si vous utilisez Notepad++, pensez \u00e0 v\u00e9rifier votre version : la 8.9.6.2 corrige plusieurs vuln\u00e9rabilit\u00e9s, dont certaines pouvant mener \u00e0 l\u2019ex\u00e9cution de code arbitraire. \ud83d\udc47 https://notepad-plus-plus.org/news/v8961-released/\u2b07\ufe0f https://notepad-plus-plus.org/news/v8962-released/\nUn attaquant pourrait tirer parti de fichiers de configuration ou de raccourcis sp\u00e9cialement modifi\u00e9s pour faire ex\u00e9cuter des commandes \u00e0 notre insu dans certains sc\u00e9narios\nUn PoC public circule d\u00e9j\u00e0, ce qui r\u00e9duit le d\u00e9lai entre la divulgation et les tentatives d\u2019exploitation opportunistes.\u2b07\ufe0f https://github.com/atiilla/Notepad-8.9.6-PoC\nDans les news\u2b07\ufe0f https://thecyberexpress.com/notepad-cve-2026-48770-vulnerability/\n#CyberVeille #NotepadPlusPlus", "url": "https://infosec.exchange/users/decio/statuses/116674085522619236"}, {"timestamp": "2026-06-23T12:13:41.810Z", "date_only": false, "value": "2026-06-23T12:13:41.810129Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxesahlrk2n", "record": "CVE-2026-48770", "field": "creation_timestamp", "uuid": "ff9a23b2-7f09-48db-89b3-26ceeb9a09e2", "content": "Notepad++\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u653b\u6483\u304c\u53ef\u80fd\u306b\u306a\u308b\u6050\u308c\u304c\u3042\u308b\n\nNotepad++\u306f\u3001\u7279\u5b9a\u306e\u6761\u4ef6\u4e0b\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b\u91cd\u5927\u306a\u6b20\u9665\u3092\u542b\u3080\u3001\u8907\u6570\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u3001\u30d0\u30fc\u30b8\u30e7\u30f38.9.6.1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\n\n2026\u5e745\u670826\u65e5\u306b\u516c\u958b\u3055\u308c\u305f\u3053\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u306f\u3001CVE-2026-48770\u3001CVE-2026-48778\u3001\u304a\u3088\u3073CVE-2026-48800\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b3\u3064\u306e\u8106\u5f31\u6027\u304c\u4fee\u6b63\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u554f\u984c\u306f\u30d0\u30fc\u30b8\u30e7\u30f38.9.6\u307e\u3067\u306b\u5f71\u97ff\u3057\u3001\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u4e0d\u9069\u5207\u306a\u53d6\u308a\u6271\u3044\u306b\u95a2\u9023\u3059\u308b\u30ea\u30b9\u30af\u3092\u6d6e\u304d\u5f6b\u308a\u306b\u3057\u3066\u3044\u307e\u3059\u3002", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxesahlrk2n"}, {"timestamp": "2026-06-26T20:22:17.683Z", "date_only": false, "value": "2026-06-26T20:22:17.683Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48770", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-26T20:22:17.683Z", "date_only": false, "value": "2026-06-26T20:22:17.683Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-48770", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-26T21:16:34.033Z", "date_only": false, "value": "2026-06-26T21:16:34.033", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48770", "record": "FKIE_CVE-2026-48770", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-26T22:03:30.244Z", "date_only": false, "value": "2026-06-26T22:03:30.244901Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7x5pvrvb22", "record": "CVE-2026-48770", "field": "creation_timestamp", "uuid": "22cfda24-0451-40af-80aa-8ee0a27fd11d", "content": "CVE-2026-48770 - Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash\nCVE ID : CVE-2026-48770\n \n Published : June 26, 2026, 8:22 p.m. | 1\u00a0hour, 22\u00a0minutes ago\n \n Description : Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in t...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7x5pvrvb22"}, {"timestamp": "2026-06-29T12:11:50.434Z", "date_only": false, "value": "2026-06-29T12:11:50.434471Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48770", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-29T12:11:50.434Z", "date_only": false, "value": "2026-06-29T12:11:50.434471Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48770", "record": "FKIE_CVE-2026-48770", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-06-29T12:11:59.840Z", "date_only": false, "value": "2026-06-29T12:11:59.840Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-48770", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-29T12:11:59.840Z", "date_only": false, "value": "2026-06-29T12:11:59.840Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48770", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-29T14:45:55.730Z", "date_only": false, "value": "2026-06-29T14:45:55.730194Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgq4266sd2d", "record": "CVE-2026-48770", "field": "creation_timestamp", "uuid": "f1dd9cc5-18ee-49bd-b663-71ba206f3670", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48770 \u0432 Notepad++: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/60139A03-9E85-4E7B-8888-2EF9C96FFD3D", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgq4266sd2d"}, {"timestamp": "2026-06-29T21:21:52.510Z", "date_only": false, "value": "2026-06-29T21:21:52.510", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48770", "record": "FKIE_CVE-2026-48770", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-25T15:00:06.656Z", "date_only": false, "value": "2026-07-25T15:00:06.656648Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/720", "record": "CVE-2026-48770", "field": "creation_timestamp", "uuid": "8daf1cd3-90b8-4160-a0b6-87b6533bb25d", "content": "Notepad++ \u0437\u0430\u043a\u0440\u044b\u043b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0432\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0447\u0443\u0436\u043e\u0439 \u043a\u043e\u0434\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Notepad++ 8.9.6.1 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 CVE-2026-48770, CVE-2026-48778 \u0438 CVE-2026-48800. \u0421\u0430\u043c\u044b\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 7,8 \u043f\u043e CVSS \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0441 config.xml \u0438 shortcuts.xml. \u0414\u043b\u044f \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 Windows-\u0441\u0440\u0435\u0434\u0430\u0445, \u0440\u0438\u0441\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u043c.\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u043a\u0430\u043a Notepad++ \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 commandLineInterpreter. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0431\u0440\u0430\u043b\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0447\u0435\u0440\u0435\u0437 \u0448\u0442\u0430\u0442\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u00abOpen Containing Folder in cmd\u00bb. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 AppData, \u044f\u0440\u043b\u044b\u043a \u0441 -settingsDir, \u043e\u0431\u043b\u0430\u0447\u043d\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0438\u043b\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043b\u0443\u0447\u0448\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e Notepad++ 8.9.6.1. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0442\u043e\u0438\u0442 \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u043c\u0438 config.xml \u0438 shortcuts.xml. \u0412 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u043f\u0440\u0430\u0432\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438 \u043b\u0443\u0447\u0448\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0437\u0430\u0440\u0430\u043d\u0435\u0435.\n\n#notepad #\u0431\u043b\u043e\u043a\u043d\u043e\u0442 #\u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440 #rce\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/720"}], "metrics": {"as_of": "2026-11-05T00:34:35.556Z", "anchors": {"origin": {"timestamp": "2026-05-26T22:00:00Z", "date_only": false, "value": "2026-05-26T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1679", "record": "WID-SEC-W-2026-1679", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-26T22:00:00Z", "date_only": false, "value": "2026-05-26T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1679", "record": "WID-SEC-W-2026-1679", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 14006075.556497, "hours": 3890.576543471389, "days": 162.10735597797455, "min_seconds": 14006075.556497, "max_seconds": 14006075.556497, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-26T22:00:00Z", "date_only": false, "value": "2026-05-26T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1679", "record": "WID-SEC-W-2026-1679", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-05T00:34:35.556Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}