Security feed

24 October 2026

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

WinRAR Absolute Path Traversal Vulnerability

WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution CISA required action: Apply updates per vendor instructions.

Announced 15 Feb 2022

WinRAR CVE-2018-20250

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-20250

WinRAR

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-20250
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2882 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:26:04 GMT
Publisher date: Tue, 15 Feb 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

RARLAB WinRAR Code Execution Vulnerability

RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Announced 24 Aug 2023

WinRAR CVE-2023-38831

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2023-38831

WinRAR

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-38831
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1268 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:59:02 GMT
Publisher date: Thu, 24 Aug 2023 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

RARLAB WinRAR Path Traversal Vulnerability

RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Announced 12 Aug 2025

WinRAR CVE-2025-8088

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2025-8088

WinRAR

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2025-8088
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #359 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:44:39 GMT
Publisher date: Tue, 12 Aug 2025 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

RARLAB WinRAR Path Traversal Vulnerability

RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Announced 9 Dec 2025

WinRAR CVE-2025-6218

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2025-6218

WinRAR

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2025-6218
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #285 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:43:04 GMT
Publisher date: Tue, 09 Dec 2025 00:00:00 GMT

Read the original announcement