Tag: ServiceNow
ServiceNow ships fixes for three perfect-10 AI platform flaws
Three maximum-severity bugs in the ServiceNow AI Platform can be exploited without authentication.
Anonymous guest access let one actor mine SaaS portals for 17 months
Reco tracks a long-running campaign harvesting records from over-permissioned SaaS portals.
GlideRecord query feature turns ServiceNow sandbox escape into pre-auth RCE
CVE-2026-6875 lets attackers bypass the ServiceNow script sandbox through a JavaScript override technique, with exploitation already in the wild.
ServiceNow sandbox escape bug now under active exploitation
Attackers are exploiting CVE-2026-6875, a critical pre-authentication RCE in the ServiceNow AI Platform, just days after disclosure.
ServiceNow Warns Customers After Malicious Actors Exploit Instance Access Flaw
ServiceNow disclosed that threat actors exploited an unpatched configuration flaw to query a subset of customer instances before a security…