VulnSocial

CVE-2026-54758PoC

MEDIUM

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

Back to dashboard
4.0/ 10 priority

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 7 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 2 signals
  • PoC mentioned or linked in 5 signals
  • Patch or workaround mentioned in 6 signals
  • Technical details provided in 5 signals
  • Disclosure: 1 classified signal
  • Peaked 4d ago at 2 mentions (2026-07-15); latest day: 2
  • 7 total mentions across 5 days

Deep dive

Activity timeline7 mentions / 5d
01122Mentions · 2026-07-15: 2Mentions · 2026-07-16: 1Mentions · 2026-07-17: 1Mentions · 2026-07-18: 1Mentions · 2026-09-12: 2PoC Mentioned / Linked · 2026-07-15: 2PoC Mentioned / Linked · 2026-07-17: 1PoC Mentioned / Linked · 2026-09-12: 2Exploit Tool / Code · 2026-07-15: 1Exploit Tool / Code · 2026-07-17: 1Patch / Workaround · 2026-07-15: 2Patch / Workaround · 2026-07-16: 1Patch / Workaround · 2026-07-18: 1Patch / Workaround · 2026-09-12: 2Technical Details · 2026-07-15: 2Technical Details · 2026-07-17: 1Technical Details · 2026-09-12: 207-1507-1607-1707-1809-12
Signal classification3 categories
PoC
457.1%
Patch
228.6%
Disclosure
114.3%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-07-152
Disclosure1PoC1
2026-07-161
Patch1
2026-07-171
PoC1
2026-07-181
Patch1
2026-09-122
PoC2
Full discourse7 posts
  • Daily CyberSecurity@Daily_CyberSec
    PoC

    Notepad++ vulnerabilities now have public PoC exploit code. CVE-2026-52886, CVE-2026-54758, and CVE-2026-57233 are fixed in v8.9.7. Update now. #NotepadPlusPlus #PathTraversal #ZipSlip #CVE #InfoSec http://securityonline.info/notepad-plus-plus-vulnerabilities/

    Post summary

    The post announces that public PoC exploit code is available for three Notepad++ CVEs, highlights the path traversal and ZipSlip flaws, and urges users to update to the fixed v8.9.7 version.

    150104736
    12.9K followersView on X
  • kokumօtօ@__kokumoto
    Disclosure

    Notepad++ v8.9.7で5件の脆弱性が修正。いずれも詳細とPoC（攻撃の概念実証コード）が開示済み。うち3件はCVE採番済み(CVE-2026-52886, CVE-2026-54758, CVE-2026-57233)、2件は採番待ち。session.xmlのbackupFilePathでのパストラバーサルやWinGupでのZip Slip等。 https://securityonline.info/notepad-plus-plus-vulnerabilities/

    Post summary

    Notepad++ version 8.9.7 has fixed five vulnerabilities, three of which already have CVE identifiers. Detailed information and PoCs for each issue have been released, and the update provides the necessary patch.

    02041847
    7.7K followersView on X
  • Lyrie.ai@lyrie_ai
    PoC

    CVE-2026-52886: Notepad++ vulnerabilities now have public PoC exploit code. CVE-2026-52886, CVE-2026-54758, and CVE-2026-57233 are fixed in v8.9.7. Update now. #NotepadPlusPlus #PathTraversal #ZipSlip #CVE #InfoSec (v8.9.7)

    Post summary

    The post announces that CVE‑2026‑52886 and related Notepad++ vulnerabilities now have a public PoC, have been fixed in version 8.9.7, and urges users to update.

    1000085
    325 followersView on X
  • Lyrie.ai@lyrie_ai
    PoC

    Full Tweet Notepad++ vulnerabilities now have public PoC exploit code. CVE-2026-52886, CVE-2026-54758, and CVE-2026-57233 are fixed in v8.9.7. Update now. #NotepadPlusPlus #PathTraversal #ZipSlip #CVE #InfoSec

    Post summary

    The tweet announces that public PoC exploit code is available for three Notepad++ CVEs and that the issues are fixed in version 8.9.7, urging users to update.

    1000064
    325 followersView on X
  • Hephaestvs@Vulcanux_
    PoC

    csirt_it: ‼️ #Notepad++: disponibili #PoC per lo sfruttamento delle CVE-2026-57233, CVE-2026-52886 e CVE-2026-54758 che interessano il noto editor di testo Rischio: 🔴 Tra le tipologie: 🔸 Arbitrary Code Execution 🔗 https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-57233-cve-2026-52886-e-cve-2026-54758 🔄 Aggior… https://t.co/4kRPtlFz1U

    Post summary

    The tweet announces publicly available Proof of Concept code for three Notepad++ CVEs, identifies the vulnerability as arbitrary code execution, and provides a link to the PoC but no mention of patches or active exploitation.

    0001045
    621 followersView on X
  • セキュリティ対策Lab@securityLab_jp
    Patch

    Notepad++、v8.9.7で5件の脆弱性を修正(CVE-2026-54758,CVE-2026-52886)過去の中国系APT乗っ取り事件を踏まえ要注意 https://rocket-boys.co.jp/security-measures-lab/notepad-v897-security-patch-cve-2026/ #セキュリティ対策Lab #security #securitynews

    Post summary

    Notepad++ 8.9.7 releases a patch for five CVEs, including CVE-2026-54758 and CVE-2026-52886, and the article advises users to stay vigilant in light of past Chinese APT incidents.

    00010130
    483 followersView on X
  • Captim@Blue_Captim
    Patch

    Notepad++ 8.9.7が公開されています。 今回の更新では、設定ファイル、セッション復元、アップデーター、マクロ、インストーラーに関係する脆弱性が修正されています。 現時点でCVE番号を確認できる3件は、 ・CVE-2026-54758 ・CVE-2026-52886 ・CVE-2026-57233 です。 現在のバージョンを確認し、公式サイトまたはアプリ内の正規更新機能から最新版へ更新してください。 https://kobewing.com/windows11/t2155/ #NotepadPlusPlus #Windows11 #セキュリティ更新

    Post summary

    The post announces the release of Notepad++ 8.9.7, lists CVEs it fixes, and urges users to update—primarily a patch advisory.

    0000076
    197 followersView on X

Explore more

Back to dashboard