CVE Watch11 ago 2026

CVE-2025-8088

RARLAB WinRAR Path Traversal Vulnerability

CVSS

8.8

Alto

EPSS

94.6%

p100

KEV

SÍ

12 ago 2025

Exploit Today

0-100

Publicado: 8 ago 2025 · Última mod.: 11 ago 2026 · CWE-35

EPSS · 30d

94.6%EPSS · 30 días94.6%

2026-08-022026-08-30

Ficha del catálogo KEV

Producto

RARLAB / WinRAR

Vulnerabilidad

RARLAB WinRAR Path Traversal Vulnerability

Añadido a KEV

12 ago 2025

Remediar antes de

2 sept 2025

Uso conocido en ransomware

Sí

Descripción resumida

RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5 ; https://nvd.nist.gov/vuln/detail/CVE-2025-8088

Descripción técnica

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-599097.1 ALT

1.9%

——1Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.12d CVE-2026-560893.3 BAJ

3.4%

29.9%

——9Subscriber Path Traversal in Do Lasso <= 358 versions.16d CVE-2026-691097.5 ALT

38.9%

——12A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application.2d CVE-2026-137169.1 CRÍ

51.8%

——16Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution.13d CVE-2026-591159.9 CRÍ

53.0%

——16'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.23d