{"id":"CVE-2026-114197","published":"2026-10-21T01:17:38.500","lastModified":"2026-10-22T17:36:46.950","description":"Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-502"],"vendors":[],"products":[],"references":[{"url":"https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0035.md","tags":[]}],"exploitRefs":[{"url":"https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0035.md","tags":[]}],"hasPoc":true,"ai":null}