CVE-2025-15556: Notepadpp Wingup Missing Cert Verificationcve-2025-15556-notepadpp-wingup-missing-cert-verification
The application invokes the WinGUp updater without explicitly enforcing cryptographic signature checks. An attacker in a privileged network position could intercept the HTTP(S) update request and serve a malicious executable payload, leading to arbitrary code execution. Ensure that '-chkCertSig=yes' is passed.
