Back
Tool
WinRar
Related CVEs
Recent activity
Silent Lynx Targets CIS Governments via WinRAR ExploitThe threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These …Gamaredon Exploits WinRAR Vulnerability in Ongoing Ukraine CampaignGamaredon, a Russian state-backed APT group, is actively exploiting a WinRAR vulnerability (CVE-2025-8088) to deploy malware against Ukrainian government and military targets. The …Exploitation of WinRAR CVE-2025-8088 Threatens Ukrainian OrganizationsTwo Russia-aligned cyber campaigns are exploiting the WinRAR vulnerability CVE-2025-8088 against Ukrainian targets nearly a year after it was patched. The flaw, a path traversal vu…Critical SSTI Vulnerability in FOSSBilling Exposes Databases to RCE AttacksA critical server-side template injection (SSTI) vulnerability in FOSSBilling, tracked as CVE-2026-28496, was disclosed on June 23, 2026. This flaw affects all versions up to 0.7.2…MuddyWater Targets U.S. Entities Amid Geopolitical TensionsIn early 2026, the Iranian APT group MuddyWater launched cyberattacks against U.S. banking, a major airport, and Israeli operations of a U.S.-based software company. The attacks in…UAC-0099 Exploits Notepad++ to Distribute Malware in UkraineUkrainian CERT has identified a cyber campaign attributed to the UAC-0099 threat cluster, which targets organizations in Ukraine using the legitimate Notepad++ application to distr…Path Traversal Vulnerability in WinRAR Exploited by RomCom GroupCVE-2025-8088 is a path traversal vulnerability in WinRAR versions up to 7.12, allowing attackers to exploit alternate data streams (ADSes) in RAR files to extract malicious payloa…State Actors Target Water Systems Amid Weak Cyber DefensesWater and wastewater systems are increasingly targeted by Russia, China, and Iran due to poor operational technology defenses. Exposed human-machine interfaces and programmable log…Ransomware Group Targets SonicWall Gen 7 Firewalls via CVE-2024-40766In June 2026, a surge in attacks targeting SonicWall Gen 7 firewalls has been reported, exploiting CVE-2024-40766, an improper access control flaw. This vulnerability allows threat…