CVE Intelligence

Mandiant FLARE vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mandiant FLARE products: 2 record(s), with severity, exploitation and fixes.

Capa 1Floss 1

Exploited only (KEV) →

CVE-2026-114198 High · 8.7 CWE-502 Oct 20, 2026
Deserialization of untrusted data in floss
Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility
CVE-2026-114197 High · 8.7 CWE-502 Oct 20, 2026
Deserialization of untrusted data in capa
Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility