Back Cybersecuritynews

CISA Warns of Notepad++ Code Execution Vulnerability Exploited in Attacks

Cybersecuritynews •Guru Baran • February 13, 2026

CISA has added CVE-2025-15556 to its Known Exploited Vulnerabilities (KEV) catalog, highlighting active exploitation of a critical code execution flaw in Notepad++, a widely used open-source text editor popular among developers and IT professionals. Added on February 12, 2026, with a federal civilian executive branch (FCEB) patching deadline of March 5, 2026, the vulnerability stems […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Alerts on Active Exploitation of Notepad++ RCE Flaw CVE-2025-15556 CISA has identified a critical remote code execution vulnerability (CVE-2025-15556) in Notepad++, which is actively being exploited. Federal agencies are required to apply patches by March 5, 2026, following its addition to the Known Exploited Vulnerabilities catalog on February 12, 2026. 2 sources 57

Extracted Entities

CVEs (1)

CVE-2025-15556