Russian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088
2026-06-11T02:51:46Z•7f84856e4b278a8715482b76ad2388c116945f29178632951398e4748d9edc4f
BerriAICISA-KEVCVE-2025-8088CVE-2026-11645CVE-2026-44963Check-PointMiasma-wormRoguePlanetTchap-breachactive-exploitationai-wormschrome-v8github-compromisemicrosoft-defendermicrosoft-patch-tuesdaysupply-chainveeamwinrar
What happened
Multiple high-impact incidents and actively exploited vulnerabilities reported: Russian-linked APTs continue exploiting the patched WinRAR path-traversal (CVE-2025-8088) to deliver malware; CISA added several issues (including BerriAI LiteLLM and Check Point Gateway) to its KEV catalog; a public PoC for the RoguePlanet Microsoft Defender zero-day can yield SYSTEM on fully patched Windows; Google patched an actively exploited Chrome V8 zero-day (CVE-2026-11645); Veeam fixed a critical RCE (CVE-2026-44963); Microsoft released a record 208 CVEs in Patch Tuesday; the Miasma worm compromised 73 Git
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 7f84856e4b278a8715482b76ad2388c116945f29178632951398e4748d9edc4f
- Enrichment time
- 2026-06-11T02:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.