CVE-2026-31839 - Vulnerability Analysis

Overview

Striae < 3.0.0 contains an integrity bypass caused by trusting manifest hash fields modifiable with package content in the digital confirmation workflow, letting attackers bypass integrity checks, exploit requires tampered confirmation packages.

Severity & Score

Impact

Attackers can bypass integrity checks, allowing tampered packages to be accepted, compromising data integrity.

Mitigation

Update to version 3.0.0 or later.

References

• https://github.com/striae-org/striae/releases/tag/v3.0.0
• https://github.com/striae-org/striae/security/advisories/GHSA-mmf8-487q-p45m

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 11, 2026

🟠 CVE-2026-31839 - High (8.2) Striae is a firearms examiner's comparison companion. A high-severity integrity bypass vulnerability existed in Striae's digital confirmation workflow prior to v3.0.0. Hash-only validation trusted manifest hash fields that could be modified togeth... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-31839/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner