CVE-2026-114198

The Mandiant FLARE floss utility, in releases before 3.2.0 , is vulnerable to arbitrary code execution due to the deserialization of untrusted data . An attacker can achieve this by providing a specially crafted .viv or .exe.viv workspace to the floss utility. No specific exploit details or remed...

EUVD-2026-106924

Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility...

CVE-2026-114197

Mandiant FLARE capa releases prior to version 10.0.0 are vulnerable to arbitrary code execution due to the deserialization of untrusted data . This vulnerability occurs when the capa utility processes a specially crafted .viv or .exe.viv workspace. The CVSS v4.0 score for this issue is 8.7 (HIGH)...

EUVD-2026-106923

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

viv-isomatic.com Cross Site Scripting vulnerability OBB-1388319

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...