CVE Listesine Dön
CVE-2025-8088 CISA KEV · Aktif SömürülüyorFidye Yazılımı İlişkili

Path traversal vulnerability in WinRAR

CVSS Skor

8.4

EPSS İhtimal

%94.5

Risk Skoru

15.9

Yayın

1 yıl önce

İlgili Siber Güvenlik Haberleri (Newsroom)

Bu zafiyetin basında ve siber güvenlik yayın organlarında yer aldığı makaleler ve analiz bültenleri:

The Hacker News15.10.2026

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives

The Record15.10.2026

Suspected Kazakhstan-linked hackers target governments across former Soviet states

A roughly 2-year-old cyber-espionage campaign against Central Asian states appears to originate in Kazakhstan, researchers said.

Cisco Talos14.10.2026

Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations

Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy.

Security.NL07.08.2026

WinRAR-lek gebruikt bij ransomware-aanvallen, meldt Amerikaanse overheid

Een bekende kwetsbaarheid in het populaire archiveringsprogramma WinRAR wordt gebruikt bij ransomware-aanvallen, zo meldt het ...

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-8088"