ctrlINT What the industry said about every indicator, with the quote

CVE-2025-6218Vulnerability

RARLAB WinRAR Path Traversal Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 3 independent sources · first reported by Trend Micro Research · last reported

Last reported 1 month ago

CISA KEVAdded 9 Dec 2025
Fix due 30 Dec 2025
Used by ransomware: not knownCISA KEV catalogue
EPSS90.5%
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

3 reports, newest first · the exact sentence from each

  1. “CVE-2025-6218 (formerly ZDI-CAN-27198): another WinRAR vulnerability allowing the specification of relative paths to extract files into arbitrary directories, potentially leading to malicious command execution”

    Kaspersky SecurelistVendor
    Exploits and vulnerabilities in Q2 2026

  2. “CVE-2025-6218”

    Recorded FutureVendor
    June 2026 CVE Landscape

  3. “Both campaigns examined in this post used CVE-2025-8088, which is related to an earlier directory traversal vulnerability (CVE-2025-6218, patched in WinRAR 7.12) but exploits a different code path through NTFS Alternate Data Streams (ADS).”

    Trend Micro ResearchVendor
    Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open

Indicators reported together

named in the same reports

Also named with it: CVE-2025-8088, CVE-2026-35273, CVE-2026-25089, CVE-2026-39808, CVE-2026-11645, CVE-2026-28318, CVE-2026-20230, CVE-2026-43284, CVE-2026-35616, CVE-2026-33825, CVE-2025-55182, CVE-2026-21509, CVE-2018-0802, CVE-2017-11882, CVE-2017-0199, CVE-2023-38831, CVE-2026-31431, CVE-2026-43500, CVE-2026-46300, CVE-2026-31635

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2025-6218 here?
No account needed. We do not store your IP address.