Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

ServiceNow published patches for four critical vulnerabilities in its Now Platform/AI Platform—three rated CVSS 10.0 (GraphQL code injection, image-upload access control leading to privilege escalation, and a SQL injection via ORDER BY) and one sandbox escape (8.7). Hosted instances have been updated by ServiceNow, while self-hosted customers must apply the fixes; ServiceNow reports no observed exploitation of these four issues, although a previously disclosed sandbox escape had reported exploitation activity.