Read the docs

Mandiant FLARE

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Mandiant FLARE records in CISA KEV

No Mandiant FLARE vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-78734 CVE-2026-114198

Deserialization of untrusted data in Mandiant FLARE floss

Priority LOW 39

Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility

CVSS 4.0HIGH 8.7 Local No auth User interaction EPSS 0.00152 Published 2026-10-21 Fixed in 3.2.0 CWE-502
TI-2026-78733 CVE-2026-114197

Deserialization of untrusted data in Mandiant FLARE capa

Priority LOW 39

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility

CVSS 4.0HIGH 8.7 Local No auth User interaction EPSS 0.00152 Published 2026-10-21 Fixed in 10.0.0 CWE-502
Open these records in search →