VulnSocial

CVE-2026-52886PoC

MEDIUM

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

Back to dashboard
4.0/ 10 priority

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 8 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 3 signals
  • PoC mentioned or linked in 6 signals
  • Patch or workaround mentioned in 6 signals
  • Technical details provided in 5 signals
  • Disclosure: 1 classified signal
  • Peaked at 3 mentions on most recent observed day (2026-09-12)
  • 8 total mentions across 5 days

Deep dive

Activity timeline8 mentions / 5d
01223Mentions · 2026-07-15: 2Mentions · 2026-07-16: 1Mentions · 2026-07-17: 1Mentions · 2026-07-18: 1Mentions · 2026-09-12: 3PoC Mentioned / Linked · 2026-07-15: 2PoC Mentioned / Linked · 2026-07-17: 1PoC Mentioned / Linked · 2026-09-12: 3Exploit Tool / Code · 2026-07-17: 1Exploit Tool / Code · 2026-09-12: 2Patch / Workaround · 2026-07-15: 2Patch / Workaround · 2026-07-16: 1Patch / Workaround · 2026-07-18: 1Patch / Workaround · 2026-09-12: 2Technical Details · 2026-07-15: 2Technical Details · 2026-07-17: 1Technical Details · 2026-09-12: 207-1507-1607-1707-1809-12
Signal classification3 categories
PoC
450.0%
Patch
337.5%
Disclosure
112.5%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-07-152
Disclosure1PoC1
2026-07-161
Patch1
2026-07-171
PoC1
2026-07-181
Patch1
2026-09-123
Patch1PoC2
Full discourse8 posts
  • Daily CyberSecurity@Daily_CyberSec
    PoC

    Notepad++ vulnerabilities now have public PoC exploit code. CVE-2026-52886, CVE-2026-54758, and CVE-2026-57233 are fixed in v8.9.7. Update now. #NotepadPlusPlus #PathTraversal #ZipSlip #CVE #InfoSec http://securityonline.info/notepad-plus-plus-vulnerabilities/

    Post summary

    The post announces public PoC exploit code for three Notepad++ vulnerabilities and notes that the issues are fixed in version 8.9.7, which users are advised to update to.

    150104736
    12.9K followersView on X
  • kokumօtօ@__kokumoto
    Disclosure

    Notepad++ v8.9.7で5件の脆弱性が修正。いずれも詳細とPoC（攻撃の概念実証コード）が開示済み。うち3件はCVE採番済み(CVE-2026-52886, CVE-2026-54758, CVE-2026-57233)、2件は採番待ち。session.xmlのbackupFilePathでのパストラバーサルやWinGupでのZip Slip等。 https://securityonline.info/notepad-plus-plus-vulnerabilities/

    Post summary

    Notepad++ v8.9.7 has fixed five vulnerabilities, three with CVE numbers (CVE-2026-52886, CVE-2026-54758, CVE-2026-57233), and detailed PoC and technical info (path traversal, Zip Slip) have been released, but no active exploitation reports exist.

    02041847
    7.7K followersView on X
  • Lyrie.ai@lyrie_ai
    PoC

    0day Intel: Notepad++ vulnerabilities now have public PoC exploit code. CVE-2026-52886, CVE-

    Post summary

    The post announces that Notepad++ vulnerabilities, including CVE-2026-52886, now have publicly available proof‑of‑concept exploit code, but it does not discuss patches, active exploitation, or detailed technical aspects.

    1000060
    325 followersView on X
  • Lyrie.ai@lyrie_ai
    PoC

    CVE-2026-52886: Notepad++ vulnerabilities now have public PoC exploit code. CVE-2026-52886, CVE-2026-54758, and CVE-2026-57233 are fixed in v8.9.7. Update now. #NotepadPlusPlus #PathTraversal #ZipSlip #CVE #InfoSec (v8.9.7)

    Post summary

    Notepad++ has published a public PoC exploit for CVE-2026-52886, with related vulnerabilities fixed in version 8.9.7. Users are urged to update to mitigate the path traversal and ZipSlip issues.

    1000085
    325 followersView on X
  • Lyrie.ai@lyrie_ai
    Patch

    Full Tweet Notepad++ vulnerabilities now have public PoC exploit code. CVE-2026-52886, CVE-2026-54758, and CVE-2026-57233 are fixed in v8.9.7. Update now. #NotepadPlusPlus #PathTraversal #ZipSlip #CVE #InfoSec

    Post summary

    Notepad++ CVEs 2026-52886, 2026-54758, and 2026-57233 now have public PoC code but are fixed in v8.9.7; users should update immediately.

    1000064
    325 followersView on X
  • Hephaestvs@Vulcanux_
    PoC

    csirt_it: ‼️ #Notepad++: disponibili #PoC per lo sfruttamento delle CVE-2026-57233, CVE-2026-52886 e CVE-2026-54758 che interessano il noto editor di testo Rischio: 🔴 Tra le tipologie: 🔸 Arbitrary Code Execution 🔗 https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-57233-cve-2026-52886-e-cve-2026-54758 🔄 Aggior… https://t.co/4kRPtlFz1U

    Post summary

    The post announces that Proof‑of‑Concept (PoC) code is publicly available to exploit three Notepad++ CVEs, and it links to the relevant resources.

    0001045
    621 followersView on X
  • セキュリティ対策Lab@securityLab_jp
    Patch

    Notepad++、v8.9.7で5件の脆弱性を修正(CVE-2026-54758,CVE-2026-52886)過去の中国系APT乗っ取り事件を踏まえ要注意 https://rocket-boys.co.jp/security-measures-lab/notepad-v897-security-patch-cve-2026/ #セキュリティ対策Lab #security #securitynews

    Post summary

    Notepad++ releases version 8.9.7, fixing five vulnerabilities including CVE‑2026‑54758 and CVE‑2026‑52886, with a warning about potential exploitation by Chinese APT actors and urging users to apply the patch.

    00010130
    483 followersView on X
  • Captim@Blue_Captim
    Patch

    Notepad++ 8.9.7が公開されています。 今回の更新では、設定ファイル、セッション復元、アップデーター、マクロ、インストーラーに関係する脆弱性が修正されています。 現時点でCVE番号を確認できる3件は、 ・CVE-2026-54758 ・CVE-2026-52886 ・CVE-2026-57233 です。 現在のバージョンを確認し、公式サイトまたはアプリ内の正規更新機能から最新版へ更新してください。 https://kobewing.com/windows11/t2155/ #NotepadPlusPlus #Windows11 #セキュリティ更新

    Post summary

    Notepad++ 8.9.7 addresses three identified CVEs; the advisory urges users to install the update for protection.

    0000076
    197 followersView on X

Explore more

Back to dashboard