Mandiant FLARE has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.7 (high).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 8.7
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

CWE-502 2

Products

capa 1
floss 1

Follow Mandiant FLARE:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

Mandiant FLARE vulnerabilities

CVEs affecting Mandiant FLARE, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-114197High· 8.7

today

Deserialization of untrusted data in capa

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility

▾ TwilightMandiant FLARE · capavia CVEORG

CVE-2026-114198High· 8.7

today

Deserialization of untrusted data in floss

Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility

▾ TwilightMandiant FLARE · flossvia CVEORG