Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-21 06:29 UTC
  • Importiert: 2026-07-27 10:50 UTC
  • CVSS: 9.5
  • Quelle-ID: thn_global
  • uid_hash: ec848cccbe5e1ccf76569437251ca9cce68b19e7dd63aba07186dd0370ededa2

Inhalt

Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber.

In a post shared on X, the threat intelligence firm said it's observing in-the-wild exploitation of CVE-2026-6875 (CVSS score: 9.5), a sandbox escape vulnerability that could allow an unauthenticated user to run arbitrary code.

Patches for the flaw were

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-6875

CRITICAL

9.5

CRITICAL

9.5

2026-07-13

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews