Multiple Vulnerabilities in ServiceNow's AI Platform Could Allow for Unauthorized Access
ID: 201c573e-80de-5e94-9c77-56f629d835ac
STIX ID: report--201c573e-80de-5e94-9c77-56f629d835ac
Feed Name: CISecurity.org Advisories
Threat Score
Multiple vulnerabilities were discovered and remediated in the ServiceNow AI Platform, including authorization bypasses, improper access control, a SQL injection, and missing authorization (CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, CVE-2026-86860). Successful exploitation of the most severe issues could permit unauthenticated or authenticated attackers to access or alter instance data, execute arbitrary SQL, and escalate privileges.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.