CVE-2025-31959

—

CVSS 3.1

3.5 low

EPSS

<1%p4

Published

May 6, 2026 (May 6, 2026)

Modified

Jun 17, 2026

Description

HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if sensitive location information is unintentionally shared. .

Vendors: hcltech
Products: bigfix service management
Weakness: CWE-1230
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.