CVE-2026-31839
HIGH8.2CVSS v3
—CVSS v2
0.02%
EPSS (exploit probability)
CWE-354CWE
Description
Striae is a firearms examiner's comparison companion. A high-severity integrity bypass vulnerability existed in Striae's digital confirmation workflow prior to v3.0.0. Hash-only validation trusted manifest hash fields that could be modified together with package content, allowing tampered confirmation packages to pass integrity checks. This vulnerability is fixed in 3.0.0.
CVSS v3 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Affected routers (0)
No routers currently mapped to this CVE in our database.