CVE Tools
Track your stack

Critical ServiceNow code execution flaw now exploited in attacks

BleepingComputerBy Sergiu Gatlan

Reported exploitedServiceNow AI Platform

Our summary

A critical vulnerability in ServiceNow's AI Platform, CVE-2026-6875, is now being actively exploited by attackers, according to threat intelligence firm Defused. The flaw allows unauthenticated users to break out of a sandbox and execute arbitrary code remotely. Despite patches being issued on July 13, real-world attacks were detected just days later. ServiceNow urges all users to apply the latest security updates immediately.

Read at BleepingComputer

BleepingComputer publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker NewsThree CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQLCVE-2026-6875
  2. BleepingComputerServiceNow warns of three max severity security vulnerabilitiesCVE-2026-6875
  3. Help Net SecurityWeek in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breachedCVE-2026-6875
  4. SecurityWeekExploitation of ServiceNow Vulnerability Seen Days After DisclosureCVE-2026-6875
  5. The Hacker NewsCritical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code ExecutionCVE-2026-6875
  6. Help Net SecurityServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875)CVE-2026-6875
  7. The Hacker News⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and MoreCVE-2026-6875
  8. SecurityWeekVulnerabilities Patched by Fortinet, Ivanti, ServiceNowCVE-2026-6875

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store