Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

7-Zip symbolic-link RCE (CVE-2025-11001, actively exploited)

Vulnerability
First reported
Last updated
Happening score
H score 35
2 unique sources, 2 articles

Summary

Hide ▲

CVE-2025-11001 in 7-Zip is being actively exploited in the wild, creating remote code execution risk for Windows systems. The flaw abuses symbolic-link handling in ZIP files and can run attacker code in an elevated user or service account context. A fix is available in 7-Zip 25.00, and proof-of-concept exploit code has already been published.

Related Happenings

CISA KEV remediation deadline for SolarWinds WHD CVE-2025-40551

Public Sector Action
H score53 First: 04.02.2026 07:50 Last: 04.02.2026 07:50 Sources 1

About this happening: CISA added CVE-2025-40551 in SolarWinds Web Help Desk to the KEV catalog and imposed federal remediation deadlines, turning a newly exploited flaw into a compl...

Open Happening

WinRAR path-traversal exploitation wave (CVE-2025-8088)

Exploitation Wave
H score20 First: 27.01.2026 21:38 Last: 27.01.2026 21:38 Sources 1

About this happening: CVE-2025-8088 in WinRAR remains an ongoing exploitation wave. Trend Micro says Russia-aligned groups Earth Dahu (Gamaredon) and SHADOW-EARTH-066 (UAC-022...

Open Happening

Fortra GoAnywhere MFT CVE-2025-10035 active exploitation wave

Exploitation Wave
H score48 First: 07.10.2025 11:45 Last: 07.10.2025 11:45 Sources 1

About this happening: CVE-2025-10035 in Fortra GoAnywhere Managed File Transfer (MFT) is being actively exploited in ransomware attacks against systems with the admin console exposed...

Open Happening

Timeline

  1. 19.11.2025 18:27 2 articles · 7mo ago

    NHS England Digital warns of active 7-Zip exploitation

    Initial Disclosure

    NHS England Digital warned that CVE-2025-11001 in 7-Zip is being actively exploited in the wild on Windows, where crafted ZIP files abusing symbolic-link handling can traverse to unintended directories and execute code in the context of an elevated user or service account. The flaw was addressed in 7-Zip version 25.00 released in July 2025, and Ryota Shiga of GMO Flatt Security Inc., together with Takumi, was credited with discovering and reporting the vulnerability.

    Show sources
    Open in new tab