[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-14984":6},{"stargazers_count":4,"fetched_at":5},8,"2026-10-01T21:17:52.676Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":82,"aliases":83,"duplicate_of":9,"upstream":84,"downstream":85,"duplicates":86,"related":87,"reserved_at":9,"published_at":88,"modified_at":89,"state":90,"summary":91,"references_raw":98,"kevs":105,"epss":9,"epss_history":106,"metrics":107,"affected":114},"CVE-2026-14984","Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-319","Cleartext Transmission of Sensitive Information","The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.","weakness","Draft","Base","High",[20,24,28,61,65],{"id":21,"name":22,"techniques":23},"CAPEC-102","Session Sidejacking",[],{"id":25,"name":26,"techniques":27},"CAPEC-117","Interception",[],{"id":29,"name":30,"techniques":31},"CAPEC-383","Harvesting Information via API Event Monitoring",[32],{"id":33,"name":34,"tactics":35,"countermeasures":42},"T1056.004","Credential API Hooking",[36,39],{"id":37,"name":38},"TA0100","Collection",{"id":40,"name":41},"TA0031","Credential Access",[43,48,53,57],{"id":44,"name":45,"tactic":46},"D3-MBT","Memory Boundary Tracking",{"name":47},"Detect",{"id":49,"name":50,"tactic":51},"D3-PSEP","Process Segment Execution Prevention",{"name":52},"Harden",{"id":54,"name":55,"tactic":56},"D3-SAOR","Segment Address Offset Randomization",{"name":52},{"id":58,"name":59,"tactic":60},"D3-PCSV","Process Code Segment Verification",{"name":47},{"id":62,"name":63,"techniques":64},"CAPEC-477","Signature Spoofing by Mixing Signed and Unsigned Content",[],{"id":66,"name":67,"techniques":68},"CAPEC-65","Sniff Application Code",[69],{"id":70,"name":71,"tactics":72,"countermeasures":77},"T1040","Network Sniffing",[73,74],{"id":40,"name":41},{"id":75,"name":76},"TA0102","Discovery",[78],{"id":79,"name":80,"tactic":81},"D3-DNSTA","DNS Traffic Analysis",{"name":47},[],[],[],[],[],[],"2026-10-01T19:59:08.703Z","2026-10-01T20:16:19.422Z","Received",{"cisa_kev":92,"cisa_ransomware":92,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":93,"severity_score":94,"severity_version":95,"severity_source":96,"severity_vector":97,"severity_status":90},false,"critical",9.4,"v4.0","cve.org","CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",[99],{"url":100,"sources":101,"tags":103},"https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0028.md",[96,102],"nvd",[104],"Third Party Advisory",[],[],[108,111],{"source":96,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":109},{"baseScore":94,"baseSeverity":110,"vectorString":97,"impactScore":9,"exploitabilityScore":9},"CRITICAL",{"source":102,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":112},{"baseScore":94,"baseSeverity":110,"vectorString":113,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[115],{"ecosystem":9,"name":116,"vendor":117,"product":118,"cpe_part":119,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":120},"Aware2","teledyne flir","aware2","a",[121],{"version":122,"is_range":123,"range_type":96,"version_start":9,"version_start_type":9,"version_end":124,"version_end_type":125,"fixed_in":9},"\u003C= 6.9.0.2",true,"6.9.0.2","including"]