Actively exploited vulnerabilities affecting RARLAB products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-6218https://wildfortech.com/security#CVE-2025-6218WinRAR, a widely used archive utility, contains a path traversal flaw that lets an attacker manipulate file extraction paths to place malicious files in unintended locations, ultimately executing arbitrary code under the logged-in user's account. Because WinRAR is installed on millions of Windows systems and is routinely used to open untrusted archive files, a crafted archive sent via email or downloaded from the web could silently compromise a machine without any obvious warning to the user.Tue, 09 Dec 2025 00:00:00 GMTRARLABWinRARhttps://wildfortech.com/security#CVE-2025-8088https://wildfortech.com/security#CVE-2025-8088WinRAR, one of the most widely used archive utilities on Windows, contains a path traversal flaw that lets attackers craft malicious archive files capable of executing arbitrary code when opened. This vulnerability is already being exploited in ransomware campaigns, meaning real-world attackers are actively weaponizing it against organizations. Any user or system that opens a booby-trapped archive could trigger a full compromise without any other interaction required.Tue, 12 Aug 2025 00:00:00 GMTRARLABWinRAR