[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0bJa6-_A1m3vFlmnTSKGJUV8J_JogT-vhhL-iopqFoY":3,"g5a-risk:CVE-2025-8088":152},{"success":4,"data":5,"meta":149},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":27,"epssTimeSeries":33,"severity":35,"affectedProducts":36,"affectedProductsCount":48,"references":49,"referencesCount":48,"weaknesses":60,"weaknessesCount":69,"isActivelyExploited":4,"cisaInfo":70,"otxData":27,"relatedBlogPosts":72,"seoMetadata":81,"configurations":106,"relatedVendorCves":120,"notableEvents":121},"CVE-2025-8088","What is CVE-2025-8088?","A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strý?ek\n     from ESET.","A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. Th...","2025-08-08T12:15:29.343","2025-08-13T19:08:45.163",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,[],[],0.94509,[34,34,34,34,34,32,32],0.9426,"High",[37,42],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"rarlab","winrar","*","cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":47},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",false,2,[50,55],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fwww.win-rar.com\u002Fsinglenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5","Win-rar",[54],"Release Notes",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fwww.welivesecurity.com\u002Fen\u002Feset-research\u002Fupdate-winrar-tools-now-romcom-and-others-exploiting-zero-day-vulnerability\u002F#the-discovery-of-cve-2025-8088","Welivesecurity",[59],"Press\u002FMedia Coverage",[61],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-35","Path Traversal: '...\u002F...\u002F\u002F'","The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '...\u002F...\u002F\u002F' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.","This allows attackers to traverse the file system to access files or directories that are outside of the restricted directory.\nThe '...\u002F...\u002F\u002F' manipulation is useful for bypassing some path traversal protection schemes. If \"..\u002F\" is filtered in a sequential fashion, as done by some regular expression engines, then \"...\u002F...\u002F\u002F\" can collapse into the \"..\u002F\" unsafe value (CWE-182). Removing the first \"..\u002F\" yields \"....\u002F\u002F\"; the second removal yields \"..\u002F\". Depending on the algorithm, the product could be susceptible to CWE-34 but not CWE-35, or vice versa.","Incomplete","Variant","Simple",1,{"shortDescription":71,"requiredAction":71,"vulnerabilityName":71,"dateAdded":27},"",[73],{"blog_guid":74,"cve_id":6,"context":75,"confidence":69,"blog_posts":76},"tag:blogger.com,1999:blog-606282676955748155.post-4134049422110915211","Mentioned in Threat Intel",{"guid":74,"title":77,"created_at":78,"updated_at":78,"published_date":79,"slug":80},"Earth Estries alive and kicking","2026-01-18T14:58:12.854792+00:00","2026-01-18T14:58:12.730992+00:00","earth-estries-alive-and-kicking-d4be13",{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2025-8088? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-8088, a high severity cyber security vulnerability from 2025. High exploit probability (94.5%). A path traversal vulnerabi...","CVE-2025-8088, CVE-2025-8088 vulnerability, CVE-2025-8088 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, rarlab security, microsoft security, winrar vulnerability, windows vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2025-8088",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-8088","Cybersecurity","CVE-2025-8088, CVE-2025-8088 vulnerability, CVE-2025-8088 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":108,"Negate":27,"Nodes":109},"AND",[110,116],{"Operator":111,"Negate":47,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":114,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":115,"VersionEndIncluding":27},"F8DD81E1-8FF3-4597-A2EA-C71D3856103E","7.13",{"Operator":111,"Negate":47,"CPEMatch":117},[118],{"Vulnerable":47,"Criteria":46,"MatchCriteriaID":119,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[122,129,136,142],{"id":123,"eventType":124,"eventTime":125,"details":126,"label":127,"color":128},"6d3fd863-29de-4092-a040-45e2baeafcd3","NEW_NVD","2025-08-09T04:01:03.93472+00:00","New CVE added to NVD","Published to NVD","blue",{"id":130,"eventType":131,"eventTime":132,"details":133,"label":134,"color":135},"8aec7383-22b4-489f-8bcd-ce7a0e1fec64","NEW_CISA","2025-08-13T04:01:08.438696+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":137,"eventType":138,"eventTime":139,"details":140,"label":141,"color":135},"16c90c23-587c-4aa9-897a-78749ad1f639","HIGH_EPSS_DELTA","2025-08-14T04:05:15.912658+00:00","Daily EPSS score increased by 0.133 on 2025-08-09","EPSS Score Increased",{"id":143,"eventType":144,"eventTime":145,"details":146,"label":147,"color":148},"bb232834-8f39-457a-92a4-f6351c676b18","LOW_EPSS_DELTA","2025-08-17T04:04:17.2797+00:00","Daily EPSS score decreased by 0.268 on 2025-08-09","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":150,"version":151},1792377167466,"2.0",{"score":153,"band":35,"action":154,"scoredAt":155},80,"Emergency patch","2026-10-16T07:08:22.394233+00:00"]