CVE-2025-8088: Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open

3 karet z 3 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2025-8088

KEV ✓ · ransomware EPSS 0.95 EPSS k 18. 10. 2026 náprava do 2. 9. 2025

Hodnocení závažnosti

8.4 CVSS 4.0 ESET

útok z místního přístupu žádné ochrany se neobcházejí funguje v běžném nastavení bez přihlášení nutná cílená akce uživatele

dopad plný únik dat úplná změna dat úplný výpadek

přesah bez úniku v okolních systémech beze změny v okolních systémech bez výpadku v okolních systémech

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

cve.org · NVD

14. 10. 2026 16:00

Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations

This research was conducted jointly with Julian-Ferdinand Vögele of Recorded Future’s Insikt Group. Details of the joint research and presentation are available here. Cisco Talos identified UAT-6275 (TAG-193 by Recorded Future) activity targeting government organizations across the Commonwealth of Independent States (CIS). Recovered artifacts show additional interest in water resources and energy. This focus is consistent with intelligence collection and may reflect the regional effects of the…

KEV ✓ · ransomware EPSS 1.00 CVE-2025-25257 CVE-2025-8088 WinRAR Fortinet veřejná správa energetika vodárenství US

tg: varování tg: zneužíváno tg: rozbor tp: malware tp: špionáž

14. 10. 2026 16:00 · Cisco Talos · Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations

26. 8. 2026 12:00

Exploits and vulnerabilities in Q2 2026

The vulnerability landscape shifted significantly in Q2 2026. First, the number of registered CVEs reached an unprecedented level. This is driven primarily by the widespread adoption of AI, both for application development and search for security flaws. This resulted in entire new classes of vulnerabilities emerging, particularly in the Linux networking subsystem. Second, security researchers have been publishing exploits for unpatched vulnerabilities more frequently. Publications like these…

KEV ✓ · ransomware EPSS 1.00 CVE-2017-0199 CVE-2017-11882 CVE-2018-0802 CVE-2023-38831 CVE-2025-6218 CVE-2025-8088 CVE-2026-31431 CVE-2026-31635 CVE-2026-43284 CVE-2026-43494 CVE-2026-43500 CVE-2026-46300 CVE-2026-46331 Microsoft Kaspersky RU

26. 8. 2026 12:00 · Securelist (Kaspersky) · Exploits and vulnerabilities in Q2 2026

8. 6. 2026

Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open

Two separate Russia-aligned campaigns are still exploiting the WinRAR flaw CVE-2025-8088 against Ukrainian organizations nearly a year after it was patched, showing how unmanaged software keeps an exploited entry point open long after the fix ships.

KEV ✓ · ransomware EPSS 0.95 CVE-2025-8088 WinRAR veřejná správa JP

8. 6. 2026 · Trend Micro · Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open