// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-wedgDTG 0600Z
ColdRecon / Breach Radar / WinRAR
Breach Record

WinRAR

DISCLOSED 2026-10-16 · UNPATCHED CVE

The Silent Lynx threat group exploited CVE-2025-8088, a WinRAR vulnerability, to compromise nine CIS government entities. The vulnerability allows remote code execution via crafted archives. CISA added the flaw to its Known Exploited Vulnerabilities Catalog, mandating federal remediation by September 2, 2025.

The record

What we know

Disclosed
2026-10-16
Attack vector
Unpatched Cve
Sources

Cited reporting

↗ www.techtimes.com (2026-10-16)
Similar vector · recent

Other unpatched cve breaches on file

French supermarket chain · 2026-10-17 BeyondTrust · 2026-10-16 FBI · 2026-10-12 FBI · 2026-10-10 FBI · 2026-10-09 Luminis Health · 2026-10-05 Pentagon · 2026-10-02 Zammad · 2026-10-02

This page is the permanent ColdRecon entry for the WinRAR disclosure. It updates if new public reporting emerges. All tracked breaches →

WinRAR just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →