PatchSiren

Mandiant FLARE CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Mandiant FLARE CVE published 2026-10-21

CVE-2026-114198

CVE-2026-114198 is a high-severity vulnerability in Mandiant FLARE floss releases before 3.2.0, allowing arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility. The vulnerability has a CVSS score of 8.7 and is classified as HIGH. The CVE record was published on 2026-10-21T00:39:47.288Z and has not been modified since then.

HIGH Mandiant FLARE CVE published 2026-10-21

CVE-2026-114197

CVE-2026-114197 is a high-severity vulnerability in Mandiant FLARE capa, a tool for analyzing executable files. The vulnerability, caused by deserialization of untrusted data, allows for arbitrary code execution when a crafted .viv or .exe.viv workspace is processed. This issue affects capa versions before 10.0.0. Defenders and security teams should be aware of this vulnerability and take necessary action [truncated]