7-Zip RCE Vulnerability Actively Exploited by Hackers in the Wild

Cyberpress • November 20, 2025

Share: View original

Cybersecurity researchers have reported active exploitation of a critical vulnerability in 7-Zip, the popular file compression software used by ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

7-Zip RCE Vulnerability CVE-2025-11001 Actively Exploited A remote code execution vulnerability in 7-Zip, tracked as CVE-2025-11001, is currently being exploited by attackers. This flaw allows remote attackers to execute arbitrary code on affected installations, impacting users of the popular file compression software. The vulnerability has a CVSS score of 7.0 and has been reported by NHS England as actively exploited in the wild. 4 sources 74

Extracted Entities

Attack Types (2)

Remote Code Execution Zero-day Exploit

Tools (1)

Vulnerabilities (1)

7-Zip RCE Vulnerability