Thehackernews

7-Zip RCE Vulnerability CVE-2025-11001 Actively Exploited

First seen 2 Dec 2025, 18:33 UTC • Thehackernews

•74.0

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A remote code execution vulnerability in 7-Zip, tracked as CVE-2025-11001, is currently being exploited by attackers. This flaw allows remote attackers to execute arbitrary code on affected installations, impacting users of the popular file compression software. The vulnerability has a CVSS score of 7.0 and has been reported by NHS England as actively exploited in the wild.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

Continue Reading

Jewelbug APT Group Engages in Espionage and Cryptocurrency Fraud UAC-0099 Exploits Notepad++ to Distribute Malware in Ukraine 7-Zip RCE Vulnerability CVE-2025-11001 Actively Exploited HoneyMyte APT Upgrades CoolClient Backdoor with Kernel Driver for Enhanced Stealth LongNosedGoblin and UAT-8302: New China-Aligned APT Threats Targeting Governments Anonymous Researcher Publishes Zero-Day Exploits for Major Software Projects

7-Zip RCE Vulnerability CVE-2025-11001 Actively Exploited

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading