Russian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088
2026-06-10T14:51:45Z•2d0b1ec34aad700fd0c62e5da2494674091343535c44b3e699d45b63dcd68019
CVE-2025-8088CVE-2026-11645CVE-2026-44963ai-wormschromecisagithub-compromiseknown-exploited-vulnerabilitiesmiasmamicrosoft-patch-tuesdayrogueplanetsupply-chaintchap-breachveeamwinrarzero-day
What happened
Multiple high-impact security developments: Russian-linked APTs continue exploiting a patched WinRAR path-traversal flaw (CVE-2025-8088) via phishing archives. Google and Microsoft disclosed actively exploited Chrome and Windows/Defender zero-days (CVE-2026-11645 and a RoguePlanet Defender bug with a published PoC). Veeam fixed a critical RCE (CVE-2026-44963, CVSS 9.4) allowing low-privileged domain users to take over backup servers. CISA added multiple vendor flaws (including BerriAI LiteLLM / Check Point Security Gateway CVE-2026-42271 and others) to its Known Exploited Vulnerabilities (KEV)
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 2d0b1ec34aad700fd0c62e5da2494674091343535c44b3e699d45b63dcd68019
- Enrichment time
- 2026-06-10T14:51:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.