#servicenow
-
Three ServiceNow Vulnerabilities Rated CVSS 10.0 Open the Door to Remote Code Execution
ServiceNow has released fixes for four vulnerabilities in its AI platform; three of them received the maximum severity score and, under certain conditions, allow an unauthenticated attacker to execute code or SQL queries.
-
One Server Has Spent Over a Year Scraping Data from Salesforce and ServiceNow Portals
The firm Reco has detailed a campaign it calls City Forum: for a year, records from Salesforce and ServiceNow customer portals were harvested from a single VPS. The cause — a guest account with excessive access.
-
Critical ServiceNow AI Platform Vulnerability Comes Under Active Attack
Researchers at Defused have observed attacks exploiting CVE-2026-6875 in the ServiceNow platform — just days after the patches were released.