Securityweek

WinRAR Vulnerability CVE-2025-8088 Exploited by State Actors

First seen 28 Jan 2026, 17:06 UTC • Feeds.Feedburner

•38.5

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Russian and Chinese state-sponsored threat actors have been exploiting a vulnerability in WinRAR, identified as CVE-2025-8088, since July 2025. Multiple cybercriminals are also taking advantage of this zero-day vulnerability, which has been widely reported in the cybersecurity community.

How this analysis works

Attack Flow

Continue Reading

Gamaredon Exploits WinRAR Vulnerability in Ongoing Ukraine Campaign Exploitation of WinRAR CVE-2025-8088 Threatens Ukrainian Organizations Critical SSTI Vulnerability in FOSSBilling Exposes Databases to RCE Attacks MuddyWater Targets U.S. Entities Amid Geopolitical Tensions UAC-0099 Exploits Notepad++ to Distribute Malware in Ukraine State Actors Target Water Systems Amid Weak Cyber Defenses

WinRAR Vulnerability CVE-2025-8088 Exploited by State Actors

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading