Warning: Critical vulnerabilities in ServiceNow, Patch immediately!
ID: 7d447379-2d3f-5692-9c79-efc7fc1c6eab
STIX ID: report--7d447379-2d3f-5692-9c79-efc7fc1c6eab
Threat Score
ServiceNow disclosed five vulnerabilities affecting its AI Platform, including two critical (CVSS 9.3) remotely exploitable issues: CVE-2026-13016 (SQL injection allowing execution of arbitrary SQL against instance databases) and CVE-2026-86860 (missing authorization enabling data exposure and potential privilege escalation). The advisory also lists three additional high-severity CVEs and recommends urgent patching and enhanced monitoring and detection; organisations are advised to report intrusions to the Centre for Cybersecurity Belgium.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.