← DOOMRADAR

cyber · Published brief

Two software vulnerabilities are being exploited despite available patches

Headlines say the Gamaredon group is exploiting WinRAR vulnerability CVE-2025-8088, for which a patch has been available since July 2025. A critical server-side request forgery vulnerability in MLflow is also being exploited, despite a patch released on July 31.

By DoomRadar · Published on DoomRadar .

Why it matters

Active exploitation of widely used software vulnerabilities can expose unpatched organizations to cyber compromise.

Related source links

These links were collected with this event. Recorded source dates may reflect when a link was found. Article publication dates are shown only when available from the source. Open the originals for their full context.

No matching source link is available in the saved records for this brief.

AI-assisted, source-based analysis. Methodology · Report a correction

Connected by topic or specific details. Dates below are publication dates; the articles may describe separate events.

EARLIER READING

Rapid7 says software exploits are emerging faster than patches

Rapid7 says newly emerging exploits are outpacing the release of software patches. The headline does not identify specific vulnerabilities, affected organizations or countries.

Related details in the reporting

MORE RECENT READING

Microsoft patches nearly 1,000 security vulnerabilities

Microsoft has addressed nearly 1,000 reported security flaws. The supplied headline does not indicate that these vulnerabilities were actively exploited or caused a specific breach.

Related details in the reporting

More in Cyber & digital services → · Browse the event archive →