CVE-2026-31839

HIGH
8.2CVSS v3
CVSS v2
0.02% EPSS (exploit probability)
CWE-354CWE

Description

Striae is a firearms examiner's comparison companion. A high-severity integrity bypass vulnerability existed in Striae's digital confirmation workflow prior to v3.0.0. Hash-only validation trusted manifest hash fields that could be modified together with package content, allowing tampered confirmation packages to pass integrity checks. This vulnerability is fixed in 3.0.0.

CVSS v3 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references