https://karmine05.github.io/dirtyfrag-blog/tags/vulnerability-management/ Recent content in Vulnerability-Management on karmine's notes Hugo -- gohugo.io en dhruv@fleetdm.com (Dhruv Majumdar) dhruv@fleetdm.com (Dhruv Majumdar) © 2026 karmine's notes Wed, 10 Jun 2026 09:00:00 -0400 https://karmine05.github.io/dirtyfrag-blog/posts/notepad-plus-plus-shortcuts-bypass-fleet/ Wed, 10 Jun 2026 09:00:00 -0400 dhruv@fleetdm.com (Dhruv Majumdar) https://karmine05.github.io/dirtyfrag-blog/posts/notepad-plus-plus-shortcuts-bypass-fleet/ GHSA-p58x-r3c9-x9p6 is a path-traversal bypass of the CVE-2026-48800 patch in Notepad++ v8.9.6.1, fixed in v8.9.6.2. It carries no CVE of its own, so vulnerability scanners that key on CVE catalogs may not flag it — and even when they do, they catch the registry-installed program while a portable notepad++.exe dropped in Downloads goes unseen. This post validates the advisory, then ships a Fleet/osquery identification query and a policy that fails when a vulnerable copy is present, installed or portable.