PatchNow: ServiceNow Critical RCE Bugs Under Active Exploit

Researchers observed active exploitation of two critical ServiceNow input-validation RCE vulnerabilities (CVE-2024-4879 and CVE-2024-5217) that enable full database/server access; a threat actor on BreachForums claims to be selling harvested email addresses and hashes from over 105 instances, a public PoC was published, CISA added the bugs to its known exploited vulnerabilities catalog, and organizations are urged to apply hotfixes or mitigate access until patched.