Servicenow Ai Platform vulnerabilities

CVE-2026-6875 [CRITICAL] CWE-94 CVE-2026-6875: ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow platform. ServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant secu

CVE-2026-18885 [CRITICAL] CWE-94 CVE-2026-18885: ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI pl ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond what was intended. ServiceNow deployed a security up

CVE-2026-74820 [CRITICAL] CWE-89 CVE-2026-74820: ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or modify, instance data beyond what was intended. Servic

CVE-2026-18886 [CRITICAL] CWE-284 CVE-2026-18886: ServiceNow has remediated an improper access control vulnerability that was identified in the Servic ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ServiceNow deployed a security update to hosted ins

CVE-2026-6876 [CRITICAL] CWE-94 CVE-2026-6876: ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI P ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This security issue could allow an unauthenticated user to execute arbitrary code within the ServiceNow AI Platform, potentially leading to more access to the ServiceNow AI Platform than intended. ServiceNow deployed a security update to hos

CVE-2026-13016 [CRITICAL] CWE-89 CVE-2026-13016: ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Pla ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or modify, instance data beyond what was intended. ServiceN

CVE-2026-0542 [CRITICAL] CWE-653 CVE-2026-0542: ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow Sandbox. ServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant secu

CVE-2026-86860 [CRITICAL] CWE-862 CVE-2026-86860: ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNo ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting in privilege escalation. ServiceNow deployed a security update to hosted instances and S

CVE-2026-86859 [HIGH] CWE-284 CVE-2026-86859: ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceN ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access, potentially enabling further unintended access. ServiceNo

CVE-2026-86858 [HIGH] CWE-284 CVE-2026-86858: ServiceNow has remediated an improper access control security issue that was identified in the Servi ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue could enable an unauthenticated user, in certain circumstances, to create, modify, or delete instance data beyond what was intended. In August 2026, ServiceNow deployed a security update to hosted instances and S

CVE-2026-86857 [HIGH] CWE-862 CVE-2026-86857: ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceN ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an authenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access, potentially enabling further unintended access. ServiceNow

CVE-2025-3089 [MEDIUM] CWE-639 CVE-2025-3089: ServiceNow has addressed a Broken Access Control vulnerability that was identified in the ServiceNow ServiceNow has addressed a Broken Access Control vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could allow a low privileged user to bypass access controls and perform a limited set of actions typically reserved for higher privileged users, potentially leading to unauthorized data modifications. This issue is addre

CVE-2025-11450 [MEDIUM] CWE-79 CVE-2025-11450: ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the S ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being executed within the browsers of ServiceNow users who click on a specially crafted link. ServiceNow has addressed this vulnerability by deploying a relevant security update

CVE-2025-11449 [MEDIUM] CWE-79 CVE-2025-11449: ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the S ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being executed within the browsers of ServiceNow users who click on a specially crafted link. ServiceNow has addressed this vulnerability by deploying a relevant security update