{"uuid": "22024099-fa66-4963-9160-c17a764fb695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8088", "type": "seen", "source": "https://thehackernews.com/2026/06/winrar-flaw-exploited-by-russia-aligned.html", "content": "Two Russia-aligned cyber attack campaigns have continued to exploit a security flaw in WinRAR to target Ukrainian organisations, almost a year after patches for the vulnerability were released.\n\nThe activity has been attributed by Trend Micro to Earth Dahu (aka Gamaredon) and SHADOW-EARTH-066 (aka UAC-0226). It involves the exploitation of CVE-2025-8088, a path traversal flaw that allows an", "creation_timestamp": "2026-06-09T10:26:10.000000Z"}