CVE-2025-6218

Exploited in the Wild ✓ Confirmed 0-Day

Triaged: March 5, 2026 3 articles

VulnLookup ↗ NVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

5.69%

probability

This CVE has a 5.69% probability of being exploited in the next 30 days.

0% Top 90.5th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

CWE-22 · Path Traversal CWE-664 · Improper Control of a Resource Through its Lifetime CWE-706 · Use of Incorrectly-Resolved Name or Reference

Exploits & PoC

ignis-sec/CVE-2025-6218

A simple proof of concept for WinRAR Path Traversal | RCE | CVE-2025-6218

mulwareX/CVE-2025-6218-POC

RARLAB WinRAR Directory Traversal Remote Code Execution

2 repos — triés par ⭐ Rechercher sur GitHub ↗

WinRAR Zero-Day Under Active Exploitation – Update to Latest Version Immediately

TheHackerNews

Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088

TheHackerNews Jan 28, 2026

Warning: WinRAR Vulnerability CVE-2025-6218 Under Active Attack by Multiple Threat Groups

TheHackerNews Dec 10, 2025

Signal Intelligence

Confidenceⓘ

85%

EPSS 5.69%

Mentions 3

Last Seen Jan 28, 2026

CNA Information

Analyst Note

CVE-2025-6218 is confirmed as a zero-day: published June 21, 2025, with documented active exploitation by multiple threat actors reported by CISA and added to the KEV catalog, indicating in-the-wild attacks occurred before or concurrent with patch availability. The 2025 publication year and explicit CISA KEV listing citing 'active exploitation' strongly support zero-day classification.