YARA rules tagged CVE_2025_8088
3 rules carry the tag “CVE_2025_8088”.
Detects RAR archives exploiting CVE-2025-8088 in WinRAR
Exploitelceef yara-rulz· marcin@ulikowski.pl· 2025-08-18Detects RAR archives abused for path traversal like CVE-2025-8088 and CVE-2025-6218
ExploitSignature Base (Florian Roth / Nextron)· Arnim Rupp (Nextron Systems)· 2025-08-11- HARFANGLAB_Vbscript_RAR_CVE_2025_8088Metadata only
Matches RAR5 archives exploiting CVE-2025-8088 to drop VBScript into Startup folder, used by Gamaredon in late 2025 - mid 2026
ExploitHarfangLab IOCs· HarfangLab· 2026-05-13