By weakness (CWE)

CWE-42: related vulnerabilities

CVEs classified under CWE-42. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-52884HIGH 7.8

  Notepad++ versions up to 8.9.6.1 contain a path traversal vulnerability that allows an attacker to bypass security checks and execute arbitrary programs from untrusted locations. When a user attempts to run an external command through Notepad++'s Run dialog, the application checks whether the target executable is in a trusted directory. However, this check uses a simple string-matching approach that can be circumvented by embedding path traversal sequences (like ..\..) after the trusted directory name. An attacker can craft a malicious file path that appears to pass the security check but actually resolves to an executable in an untrusted location, leading to arbitrary code execution if a user is tricked into running it. The issue is resolved in version 8.9.6.2.