high8.7
CVE-2026-114198
Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is pa…
Impact
Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility
Affected products
| Product | Affected versions |
|---|---|
| Mandiant FLARE Floss Releases | before 3.2.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.