CVE-2026-20841 PoC — Windows Notepad App Remote Code Execution Vulnerability

Source

https://github.com/SecureWithUmer/CVE-2026-20841

Associated Vulnerability

Title:Windows Notepad App Remote Code Execution Vulnerability (CVE-2026-20841)
Description:Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute code locally.

Description

PoC for a remote code execution flaw in Windows Notepad's markdown renderer. The markdown engine does not restrict URL protocols, allowing arbitrary protocol handlers to be triggered via clickable links

File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →