TI-2026-30535 CVE-2026-42214
Improper Control of Generation of Code ('Code Injection') in dail8859/NotepadNext
Priority HIGH 69
Notepad Next is a cross-platform, reimplementation of Notepad++.
dail8859
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
dail8859 records in CISA KEVNo dail8859 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2025-32967 CVE-2025-52939 · GHSA-hhj4-3c38-ppmf
Potential heap-buffer overflow vulnerability in NotepadNext
Priority MEDIUM 42
Out-of-bounds Write vulnerability in dail8859 NotepadNext (src/lua/src modules).
TI-2025-32966 CVE-2025-52938 · GHSA-7958-493x-jj7h
Potential heap-based buffer over-read vulnerability in NotepadNext
Priority LOW 22
Out-of-bounds Read vulnerability in dail8859 NotepadNext (src/lua/src modules).