ServiceNow warns of three max severity security vulnerabilities

ServiceNow issued patches for three critical AI Platform vulnerabilities (unauthenticated code injection, privilege escalation, and SQL injection: CVE-2026-18885, CVE-2026-18886, CVE-2026-74820) and a high-severity sandbox escape (CVE-2026-6876); the issues are low-complexity and can be exploited without authentication, so customers are urged to apply updates promptly despite no confirmed active exploitation of these specific flaws.