high8.7
CVE-2026-114197
Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is pa…
Impact
Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility
Affected products
| Product | Affected versions |
|---|---|
| Mandiant FLARE Capa Releases | before 10.0.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.