CyberSecBulletin

Mandiant FLARE vulnerabilities

We track 2 vulnerabilities in Mandiant FLARE products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.

2vulnerabilities
0critical
2high
0exploited
8.7average CVSS score

Latest Mandiant FLARE vulnerabilities

  • 8.7 High severity

    floss: Deserialization of Untrusted Data

    CVE-2026-114198Mandiant FLARE

    Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility

  • 8.7 High severity

    capa: Deserialization of Untrusted Data

    CVE-2026-114197Mandiant FLARE

    Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility