CVE-2026-85288Published
Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-85288 · Microsoft / collected KEV context
cve-program · CVE-2026-85288
- https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-759j-g8j4-867p
- https://github.com/notepad-plus-plus/notepad-plus-plus/commit/4cd74cb9347b9c6caaab17d999e24fc9ed228ff7
- https://github.com/notepad-plus-plus/notepad-plus-plus/releases/tag/v8.9.8
- https://notepad-plus-plus.org/news/v898-released
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.