CVE Watch11 de ago. de 2026

CVE-2025-8088

RARLAB WinRAR Path Traversal Vulnerability

CVSS

8.8

Alta

EPSS

94.0%

p100

KEV

SIM

12 de ago. de 2025

Exploit Today

0-100

Publicado: 8 de ago. de 2025 · Última mod.: 11 de ago. de 2026 · CWE-35

EPSS · 30d

94.0%EPSS · 30 dias94.5%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

RARLAB / WinRAR

Vulnerabilidade

RARLAB WinRAR Path Traversal Vulnerability

Adicionado ao KEV

12 de ago. de 2025

Corrigir até

2 de set. de 2025

Uso conhecido em ransomware

Sim

Descrição resumida

RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5 ; https://nvd.nist.gov/vuln/detail/CVE-2025-8088

Descrição técnica

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-397347.5 ALT

40.0%

——12Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.6d CVE-2026-1186338.1 ALT

48.6%

——15A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and the patch must be installed manually.11h CVE-2026-444159.1 CRÍ

41.4%

——12Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.21d CVE-2026-444146.8 MÉD

40.7%

21.9%

——7Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the URL to include a path traversal payload. Successful exploitation of this vulnerability could allow an attacker to access critical system files containing confidential information.29d CVE-2026-1056833.8 BAI

24.4%

——7Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0.29d