{"id":"CVE-2026-114198","published":"2026-10-21T01:17:38.633","lastModified":"2026-10-22T17:36:46.950","description":"Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-502"],"vendors":[],"products":[],"references":[{"url":"https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0036.md","tags":[]}],"exploitRefs":[{"url":"https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0036.md","tags":[]}],"hasPoc":true,"ai":null}