CVE-2026-114198
Deserialization of untrusted data in floss
Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility
CVSS 4.0 · 8.7 High
EPSS < 1%
KEV · Not listed
Vendors
Products