WinRAR
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Threat actors named alongside
Source: RedTeamDaily stories that mention bothSecurity timeline
- Activity reported by The Hacker NewsRussia-aligned Gorbag group uses WinRAR flaw to deploy data-stealing malware
- Vulnerability reported by Zero Day Initiative BlogGitLab CVSS 10.0 flaw targeted on Alpine Linux server; Ivanti, LiteLLM and UAT-6275 also reported
Recent news
Russia-aligned Gorbag group uses WinRAR flaw to deploy data-stealing malware
The Russia-aligned threat actor Gorbag is deploying basic information stealer malware against Ukrainian targets, according to ESET researchers. The group has been active since at least February 2025 and focuses on law enforcement, justice entities, front-line local administrations and the defence sector. The article title says the intrusions exploit a WinRAR flaw to deliver the malware.
GitLab CVSS 10.0 flaw targeted on Alpine Linux server; Ivanti, LiteLLM and UAT-6275 also reported
Alpine Linux said on 28 October that an attacker tried to exploit GitLab flaw CVE-2026-97229 (CVSS 10.0) on its GitLab server a week after the fix was released, with no evidence of success. Roundups also cover actively exploited Ivanti Connect Secure and Windows Shell bugs, LiteLLM gateway flaws fixed in version 1.83.9, and Talos and Recorded Future research on UAT-6275, a Kazakhstan-nexus group targeting CIS governments.