{"id":12835,"date":"2025-08-18T08:41:46","date_gmt":"2025-08-18T06:41:46","guid":{"rendered":"https:\/\/www.infordisa.com\/soc\/?p=12835"},"modified":"2025-08-18T13:15:30","modified_gmt":"2025-08-18T11:15:30","slug":"vulnerabilitat-zero-day-a-winrar-cve-2025-8088-explotacio-activa","status":"publish","type":"post","link":"https:\/\/www.infordisa.com\/soc\/ca\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\/","title":{"rendered":"Vulnerabilitat Zero-Day a WinRAR (CVE-2025-8088) \u2013 Explotaci\u00f3 Activa"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"12835\" class=\"elementor elementor-12835\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-398ec58e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"398ec58e\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2a37fead\" data-id=\"2a37fead\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-77f11ef5 elementor-widget elementor-widget-shortcode\" data-id=\"77f11ef5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><span style=\"color: #c02b23;font-weight: bold\">Alta <\/span><img loading=\"lazy\" decoding=\"async\" width=\"10\" height=\"10\" src=\"https:\/\/www.infordisa.com\/soc\/imgs\/alerta-4.png\" alt=\"Alerta 4\"\/><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-11ea422d elementor-widget elementor-widget-text-editor\" data-id=\"11ea422d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div><strong><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-8088\" target=\"_blank\" rel=\"noopener\">CVE-2025-8088<\/a><\/strong><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-11e89d3a elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"11e89d3a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-de77583 elementor-widget elementor-widget-text-editor\" data-id=\"de77583\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul><li><strong>Descubrimiento<\/strong>: 18 de julio de 2025, seg&uacute;n ESET<\/li><li><strong>Parche disponible<\/strong>: RARLAB lanz&oacute; WinRAR 7.13 (beta el 24 de julio; versi&oacute;n oficial el 30\/31 de julio de 2025)<\/li><li><strong>Publicaci&oacute;n del plugin de detecci&oacute;n (Nessus)<\/strong>: 11 de agosto de 2025, actualizado el 15 de agosto<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-061178f elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"061178f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-81f9bc6 elementor-widget elementor-widget-text-editor\" data-id=\"81f9bc6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Naturaleza de la amenaza<\/h2><ul><li><strong>Tipo de <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/vulnerabilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">vulnerabilidad<\/a><\/strong>: Directory traversal (<a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/cve\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>CVE<\/a>-2025-8088), que permite que un archivo comprimido malicioso sobrescriba o coloque archivos fuera del directorio designado por el usuario, posibilitando la ejecuci&oacute;n remota de c&oacute;digo.<\/li><li>La explotaci&oacute;n se realizaba mediante <strong>flujos de datos alternativos (ADS)<\/strong>, ocultos dentro de archivos RAR aparentemente benignos.<\/li><li>Al extraer estos archivos, se generaban <strong>backdoors<\/strong>: variantes como SnipBot, RustyClaw o el agente Mythic, con doble prop&oacute;sito de persistencia y espionaje.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4dc691b elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"4dc691b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c214604 elementor-widget elementor-widget-text-editor\" data-id=\"c214604\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Actores involucrados y objetivos<\/h2><ul><li><strong>RomCom<\/strong> (tambi&eacute;n llamado Storm-0978 \/ Tropical Scorpius \/ UNC2596), alineado con Rusia, responsable de la explotaci&oacute;n primaria. Dirigido a empresas financieras, manufactureras, de defensa y log&iacute;stica en Europa y Canad&aacute;.<\/li><li>Otro actor, <strong>Paper Werewolf<\/strong>, seg&uacute;n BI.ZONE, tambi&eacute;n utiliz&oacute; esta vulnerabilidad poco despu&eacute;s, apuntando principalmente a organizaciones rusas.<\/li><li>Se sugiere que el <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/exploit\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>exploit<\/a> fue ofrecido en un foro de ciberdelincuencia por USD 80,000, lo que pudo facilitar su aparici&oacute;n entre m&uacute;ltiples actores maliciosos.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-01029a5 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"01029a5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-39da38f elementor-widget elementor-widget-text-editor\" data-id=\"39da38f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Riesgos e impacto t&eacute;cnico<\/h2><ul><li>Riesgo elevado: <strong>CVSS v4 de 8,4<\/strong>, calificado como &laquo;alta&raquo; severidad, con un VPR (Vulnerability Priority Rating) cr&iacute;tico de 9,2.<\/li><li>Explotaci&oacute;n en entornos reales mediante p<strong>hishing dirigido (spearphishing)<\/strong> con CVs como se&ntilde;uelo.<\/li><li>Los exploits permiten persistencia mediante creaci&oacute;n de archivos LNK en carpetas de inicio y ejecuci&oacute;n silenciosa al iniciar sesi&oacute;n.<\/li><li>A pesar del riesgo, no se reportaron casos de compromiso exitoso en los objetivos observados por ESET.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b799afd elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"b799afd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-767ef19 elementor-widget elementor-widget-text-editor\" data-id=\"767ef19\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Recomendaciones urgentes<\/h2><ol><li><strong>Actualiza inmediatamente a WinRAR 7.13 o superior<\/strong> (disponible desde el 30&ndash;31 de julio de 2025).<\/li><li>Aseg&uacute;rate de que tambi&eacute;n se actualicen todas las dependencias relacionadas: <strong>UnRAR.dll<\/strong> y c&oacute;digos fuente portables de UnRAR.<\/li><li>Si utilizas <strong>7-Zip<\/strong>, verifica que est&eacute; actualizado a al menos la versi&oacute;n <strong>25.01<\/strong>, ya que corrige una vulnerabilidad similar (CVE-2025-55188).<\/li><li><strong>Filtra o a&iacute;sla archivos .rar\/.zip externos<\/strong>; si necesitas abrirlos, hazlo dentro de una <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/sandbox\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>sandbox<\/a>.<\/li><li><strong>Monitorea escrituras de WinRAR.exe \/ UnRAR.dll<\/strong> en rutas cr&iacute;ticas como Startup, AppData o ProgramData.<\/li><li>Mejora la concienciaci&oacute;n entre los empleados sobre los riesgos del <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/phishing\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>phishing<\/a> y los archivos comprimidos sospechosos.<\/li><li>Si usas Nessus, aseg&uacute;rate de tener actualizado el plugin <strong>248462<\/strong> para detectar instalaciones vulnerables y facilitar auditor&iacute;as de cumplimiento.<\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a85d7c elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"3a85d7c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b085788 elementor-widget elementor-widget-text-editor\" data-id=\"b085788\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Conclusi&oacute;n<\/h2><p>La <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/vulnerabilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">vulnerabilidad<\/a> <strong>CVE-2025-8088<\/strong>, explotada activamente desde mediados de julio de 2025, representa un riesgo significativo para usuarios y organizaciones que utilizan WinRAR. Afortunadamente, desde finales de julio ya hay un parche disponible. Sin embargo, debido a su <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/disponibilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">disponibilidad<\/a> p&uacute;blica y venta en el mercado negro, es probable que su explotaci&oacute;n aumente. La mitigaci&oacute;n r&aacute;pida y eficiente es fundamental.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Vulnerabilitat explotada activament des de mitjans de juliol del 2025, representa un risc per a organitzacions que utilitzen WinRAR.<\/p>","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[4],"tags":[147,177],"class_list":["post-12835","post","type-post","status-publish","format-standard","hentry","category-alertas-de-seguridad","tag-vulnerabilidad","tag-winrar","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-25"],"acf":[],"yoast_head":"<title>Vulnerabilidad Zero-Day en WinRAR (CVE-2025-8088) - Explotaci\u00f3n Activa - INFORDISA \/ Security Operations Center<\/title>\n<meta name=\"description\" content=\"Vulnerabilidad explotada activamente desde mediados de julio de 2025, representa un riesgo para organizaciones que utilizan WinRAR.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/vulnerabilitat-zero-day-a-winrar-cve-2025-8088-explotacio-activa\/\" \/>\n<meta property=\"og:locale\" content=\"ca_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerabilidad Zero-Day en WinRAR (CVE-2025-8088) - Explotaci\u00f3n Activa - INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"og:description\" content=\"Vulnerabilidad explotada activamente desde mediados de julio de 2025, representa un riesgo para organizaciones que utilizan WinRAR.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infordisa.com\/soc\/ca\/vulnerabilitat-zero-day-a-winrar-cve-2025-8088-explotacio-activa\/\" \/>\n<meta property=\"og:site_name\" content=\"INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infordisa\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-08-18T06:41:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-18T11:15:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2023\/08\/alerta-winrar.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jordi Sala\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2023\/08\/alerta-winrar.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@infordisa\" \/>\n<meta name=\"twitter:site\" content=\"@infordisa\" \/>\n<meta name=\"twitter:label1\" content=\"Escrit per\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jordi Sala\" \/>\n\t<meta name=\"twitter:label2\" content=\"Temps estimat de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minuts\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\\\/\"},\"author\":{\"name\":\"Jordi Sala\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\"},\"headline\":\"Vulnerabilidad Zero-Day en WinRAR (CVE-2025-8088) &#8211; Explotaci\u00f3n Activa\",\"datePublished\":\"2025-08-18T06:41:46+00:00\",\"dateModified\":\"2025-08-18T11:15:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\\\/\"},\"wordCount\":484,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"keywords\":[\"Vulnerabilidad\",\"WinRAR\"],\"articleSection\":[\"Alertas de seguridad\"],\"inLanguage\":\"ca\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\\\/\",\"name\":\"Vulnerabilidad Zero-Day en WinRAR (CVE-2025-8088) - Explotaci\u00f3n Activa - INFORDISA \\\/ Security Operations Center\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\"},\"datePublished\":\"2025-08-18T06:41:46+00:00\",\"dateModified\":\"2025-08-18T11:15:30+00:00\",\"description\":\"Vulnerabilidad explotada activamente desde mediados de julio de 2025, representa un riesgo para organizaciones que utilizan WinRAR.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\\\/#breadcrumb\"},\"inLanguage\":\"ca\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilidad Zero-Day en WinRAR (CVE-2025-8088) &#8211; Explotaci\u00f3n Activa\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"description\":\"Portal de Ciberseguridad\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ca\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"width\":400,\"height\":34,\"caption\":\"INFORDISA \\\/ Security Operations Center\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/infordisa\\\/\",\"https:\\\/\\\/x.com\\\/infordisa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/infordisa\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/InfordisaTV\",\"https:\\\/\\\/www.instagram.com\\\/infordisa\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\",\"name\":\"Jordi Sala\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"caption\":\"Jordi Sala\"},\"description\":\"Marketing\",\"sameAs\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"],\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/ca\\\/author\\\/jsala\\\/\"}]}<\/script>","yoast_head_json":{"title":"Vulnerabilitat Zero-Day a WinRAR (CVE-2025-8088) - Explotaci\u00f3 Activa - INFORDISA \/ Security Operations Center","description":"Vulnerabilitat explotada activament des de mitjans de juliol del 2025, representa un risc per a organitzacions que utilitzen WinRAR.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infordisa.com\/soc\/ca\/vulnerabilitat-zero-day-a-winrar-cve-2025-8088-explotacio-activa\/","og_locale":"ca_ES","og_type":"article","og_title":"Vulnerabilidad Zero-Day en WinRAR (CVE-2025-8088) - Explotaci\u00f3n Activa - INFORDISA \/ Security Operations Center","og_description":"Vulnerabilidad explotada activamente desde mediados de julio de 2025, representa un riesgo para organizaciones que utilizan WinRAR.","og_url":"https:\/\/www.infordisa.com\/soc\/ca\/vulnerabilitat-zero-day-a-winrar-cve-2025-8088-explotacio-activa\/","og_site_name":"INFORDISA \/ Security Operations Center","article_publisher":"https:\/\/www.facebook.com\/infordisa\/","article_published_time":"2025-08-18T06:41:46+00:00","article_modified_time":"2025-08-18T11:15:30+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2023\/08\/alerta-winrar.jpg","type":"image\/jpeg"}],"author":"Jordi Sala","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2023\/08\/alerta-winrar.jpg","twitter_creator":"@infordisa","twitter_site":"@infordisa","twitter_misc":{"Escrit per":"Jordi Sala","Temps estimat de lectura":"3 minuts"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\/#article","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\/"},"author":{"name":"Jordi Sala","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375"},"headline":"Vulnerabilidad Zero-Day en WinRAR (CVE-2025-8088) &#8211; Explotaci\u00f3n Activa","datePublished":"2025-08-18T06:41:46+00:00","dateModified":"2025-08-18T11:15:30+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\/"},"wordCount":484,"publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"keywords":["Vulnerabilidad","WinRAR"],"articleSection":["Alertas de seguridad"],"inLanguage":"ca"},{"@type":"WebPage","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\/","url":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\/","name":"Vulnerabilitat Zero-Day a WinRAR (CVE-2025-8088) - Explotaci\u00f3 Activa - INFORDISA \/ Security Operations Center","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/#website"},"datePublished":"2025-08-18T06:41:46+00:00","dateModified":"2025-08-18T11:15:30+00:00","description":"Vulnerabilitat explotada activament des de mitjans de juliol del 2025, representa un risc per a organitzacions que utilitzen WinRAR.","breadcrumb":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\/#breadcrumb"},"inLanguage":"ca","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infordisa.com\/soc\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-zero-day-en-winrar-cve-2025-8088-explotacion-activa\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.infordisa.com\/soc\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilidad Zero-Day en WinRAR (CVE-2025-8088) &#8211; Explotaci\u00f3n Activa"}]},{"@type":"WebSite","@id":"https:\/\/www.infordisa.com\/soc\/#website","url":"https:\/\/www.infordisa.com\/soc\/","name":"INFORDISA \/ Security Operations Center","description":"Portal de Ciberseguretat","publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infordisa.com\/soc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ca"},{"@type":"Organization","@id":"https:\/\/www.infordisa.com\/soc\/#organization","name":"INFORDISA \/ Security Operations Center","url":"https:\/\/www.infordisa.com\/soc\/","logo":{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","width":400,"height":34,"caption":"INFORDISA \/ Security Operations Center"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infordisa\/","https:\/\/x.com\/infordisa","https:\/\/www.linkedin.com\/company\/infordisa","https:\/\/www.youtube.com\/user\/InfordisaTV","https:\/\/www.instagram.com\/infordisa\/"]},{"@type":"Person","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375","name":"Jordi Sala","image":{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","caption":"Jordi Sala"},"description":"M\u00e0rqueting","sameAs":["https:\/\/www.infordisa.com\/soc\/"],"url":"https:\/\/www.infordisa.com\/soc\/ca\/author\/jsala\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/12835","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/comments?post=12835"}],"version-history":[{"count":5,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/12835\/revisions"}],"predecessor-version":[{"id":12841,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/12835\/revisions\/12841"}],"wp:attachment":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/media?parent=12835"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/categories?post=12835"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/tags?post=12835"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}