Signalis
sign in--:--:--UTC
CVEs

CVE-2025-8088

exploited in the wild☆ pin
CVSS
8.4
Reports
16
First seen
Aug 20, 2025
Last seen
Oct 15, 2026
Affected product

WinRAR

Associated actors

Gamaredon ×6Turla ×3SHADOW-EARTH-066 ×2UAT-6275 ×2Hive0117 ×1Kimwolf ×1Mustang Panda ×1NoName057(16) ×1Outsider ×1PHALT#BLYX ×1Qilin ×1Russia-linked groups ×1Salt Typhoon ×1Sandworm ×1Scattered Lapsus Hunters ×1ShinyHunters ×1TAG-193 ×1Black Axe ×1UAT-8837 ×1BO Team ×1

Recent reports

High

Kazakhstan-linked hackers target governments across former Soviet states

The Record (Recorded Future News)High

UAT-6275 targets CIS government organizations with multi-stage malware and WinRAR exploit

Cisco TalosHigh

TAG-193's Regional Espionage Operations Targeting Central Asian Governments

Recorded Future InsiktHigh

Exploits and vulnerabilities in Q2 2026

Kaspersky SecurelistHigh

7-Zip patches RCE vulnerability in XZ decompression

Bleeping ComputerHigh

Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse

The Hacker NewsHigh

Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks

The Hacker NewsHigh

Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances

ESET WeLiveSecurityCritical

Check Point Threat Intelligence Report – 15 June 2026

Check Point ResearchHigh

WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine

The Hacker NewsCritical

WinRAR Flaw CVE-2025-8088 Exploited by Russia-Aligned Campaigns Against Ukraine

Trend Micro ResearchCritical

Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine

The Hacker NewsHigh

Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing and Cobalt Strike

The Hacker NewsHigh

Exploits and vulnerabilities in Q1 2026

Kaspersky SecurelistHigh

CERT-EU Cyber Brief January 2026 – Espionage, Ransomware, and Critical Vulnerabilities

CERT-EU Threat IntelCritical

WinRAR Critical Path Traversal Vulnerability (CVE-2025-8088) – Immediate Patching Required

NICS Taiwan

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans