Is CVE-2025-31978 actively exploited?

No active exploitation of CVE-2025-31978 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-31978 be exploited remotely?

Yes. CVE-2025-31978 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2025-31978?

CVE-2025-31978 has a CVSS score of 4.6 (MEDIUM).

HOME VULNERABILITIESCVE-2025-31978

MEDIUM

CVE-2025-31978

CWE-201Published: May 6, 2026· Updated: May 7, 2026

4.6

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:7.8th

Official Description

HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacker could populate data fields which, when saved to a CSV file, may attempt information exfiltration or other malicious activity when automatically executed by the spreadsheet software. Note that current versions of Excel warn users of untrusted content.

NVD Source

Technical Analysis

CVE-2025-31978 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.