Tag: ServiceNow
GlideRecord query feature turns ServiceNow sandbox escape into pre-auth RCE
CVE-2026-6875 lets attackers bypass the ServiceNow script sandbox through a JavaScript override technique, with exploitation already in the wild.
ServiceNow sandbox escape bug now under active exploitation
Attackers are exploiting CVE-2026-6875, a critical pre-authentication RCE in the ServiceNow AI Platform, just days after disclosure.
ServiceNow Warns Customers After Malicious Actors Exploit Instance Access Flaw
ServiceNow disclosed that threat actors exploited an unpatched configuration flaw to query a subset of customer instances before a security…