The420.In
CISA Alerts on Active Exploitation of Notepad++ RCE Flaw CVE-2025-15556
First seen 14 Feb 2026, 15:09 UTC
•
•57.2
Export
Article Content
Browse articles
CISA has identified a critical remote code execution vulnerability (CVE-2025-15556) in Notepad++, which is actively being exploited. Federal agencies are required to apply patches by March 5, 2026, following its addition to the Known Exploited Vulnerabilities catalog on February 12, 2026.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2026-02-03
CVE-2025-15556 published
2026-02-09
First public PoC released
2026-02-12
CVE-2025-15556 added to CISA KEV catalog
2026-02-14
CISA issues warning on active exploitation
More articles in this cluster
Continue Reading
APT28 Exploits MSHTML Zero-Day Vulnerability in Windows
Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation
Critical Exploitation of Cisco CM and Samsung KNOX Vulnerabilities
Critical OpenSSL Vulnerability CVE-2025-15467 Patched
APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign