CVE-2026-114197

Mandiant FLARE capa releases prior to version 10.0.0 are vulnerable to arbitrary code execution due to the deserialization of untrusted data . This vulnerability occurs when the capa utility processes a specially crafted .viv or .exe.viv workspace. The CVSS v4.0 score for this issue is 8.7 (HIGH)...

EUVD-2026-106923

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...