EXPOSURES › CVE-2018-20250
CVE-2018-20250
CRITICAL ⌖ ON CISA KEV · EXPLOITED
DETAIL
⚡ RCE
⌖ EXPLOITED IN THE WILD
SHAME 95/100
ransomwarerceexploited-in-wild
WinRAR's path traversal vulnerability allowed remote code execution and has been actively exploited in ransomware attacks, demonstrating a critical failure to control user input and validate file paths.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
PLAYERS IMPLICATED
DESCRIPTION
WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
SENTIMENT · TRUSTED SOURCES
synthesis
severe-fallout
-0.60
RARLAB faced severe fallout due to a critical RCE vulnerability exploited by threat actors, though the provided sources lack direct commentary on RARLAB's response or reputation, focusing instead on t
Severe fallout due to zero-day exploited by threat actors.
"A newly discovered zero-day vulnerability in WinRAR, cataloged as CVE-2025-8088, is being actively exploited in the wild by RomCom, a Russia-aligned threat actor."
Severe fallout due to zero-day exploited in phishing attacks.
"A recently patched WinRAR vulnerability tracked as CVE-2025-8088 was used in live phishing campaigns to install RomCom backdoors."
Severe fallout due to critical RCE vulnerability exploited by threat actors.
"WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution"
Neutral; source is a general CVE database with no commentary on RARLAB.
Neutral; source is a general advisory database with no commentary on RARLAB.
Neutral; source is a general CVE database with no commentary on RARLAB.
Neutral; source is a general CVE tracking page with no commentary on RARLAB.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.