ServiceNow

14 results · Clear filters · Feed

• Critical 9.4
  CVE-2026-103093

  Sandbox Escape via Table Rotation in ServiceNow AI Platform

  ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the under…

  ServiceNow ServiceNow AI Platform
  Oct 29, 2026
• Critical 9.3
  CVE-2026-86860

  Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform

  ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting …

  ServiceNow ServiceNow AI Platform
  Sep 24, 2026
• Critical 9.3
  CVE-2026-13016

  Unauthenticated SQL Injection in ServiceNow AI Platform

  ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying…

  ServiceNow ServiceNow AI Platform
  Sep 24, 2026
• Critical 10.0
  CVE-2026-74820

  Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause

  ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underly…

  ServiceNow ServiceNow AI Platform
  Aug 27, 2026
• Critical 10.0
  CVE-2026-18886

  Unauthenticated Privilege Escalation via System Configuration Image Upload Processor

  ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended…

  ServiceNow ServiceNow AI Platform
  Aug 27, 2026
• Critical 10.0
  CVE-2026-18885

  Unauthenticated Remote Code Execution in GraphQL Composite Data API

  ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access…

  ServiceNow ServiceNow AI Platform
  Aug 27, 2026
• Critical 10.0
  CVE-2026-6876

  Sandbox Escape in ServiceNow AI Platform

  ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This security issue could allow an unauthenticated user to execute arbitrary code within the ServiceNow AI Platform, potentially leading to more acces…

  ServiceNow ServiceNow AI Platform
  Aug 27, 2026
• Critical 9.5
  CVE-2026-6875 Public exploit Scanner template

  Sandbox Escape in ServiceNow AI Platform

  ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow platform. ServiceNow add…

  ServiceNow ServiceNow AI Platform
  Jul 13, 2026
• Critical 9.2
  CVE-2026-0542 Public exploit

  Remote Code Execution in ServiceNow AI Platform

  ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow Sandbox.    ServiceNow a…

  ServiceNow ServiceNow AI Platform
  Feb 25, 2026
• Critical 9.3
  CVE-2025-12420 Public exploit EPSS 53%

  Unauthenticated Privilege Escalation in ServiceNow AI Platform

  A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform. ServiceNow has addressed this vulnerability b…

  ServiceNow Virtual Agent API Now Assist AI Agents
  Jan 12, 2026
• Critical 9.8
  CVE-2024-8923

  Sandbox Escape in Now Platform

  ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow deployed an update to hoste…

  ServiceNow Now Platform
  Oct 29, 2024
• Critical 9.8
  CVE-2024-5217 Exploited Scanner template EPSS 100%

  Incomplete Input Validation in GlideExpression Script

  ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now P…

  ServiceNow Now Platform
  Jul 10, 2024

  KEV Jul 29, 2024
• Critical 9.8
  CVE-2024-4879 Exploited Public exploit Scanner template EPSS 100%

  Jelly Template Injection Vulnerability in ServiceNow UI Macros

  ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. Servi…

  ServiceNow Now Platform
  Jul 10, 2024

  KEV Jul 29, 2024
• Critical 9.9
  CVE-2022-43684

  ACL bypass in Reporting functionality

  ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core functionality. Additional Details This issue is present in the following supported ServiceNow releases: * Quebec prior to Patch 10 Hot Fix…

  ServiceNow Now Platform
  Jun 13, 2023