CVE Tools
Track your stack

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

The Hacker NewsBy The Hacker News

Reported exploitedServiceNow AI Platform

Our summary

A critical vulnerability in ServiceNow AI Platform, identified as CVE-2026-6875, is currently being actively exploited by attackers to execute arbitrary code without authentication. The flaw, rated with a CVSS score of 9.5, enables sandbox escape and has been observed in real-world attacks targeting the "/assessment_thanks.do" endpoint. Patches have been issued for several versions including Brazil EA/GA, Australia Patch 2, Zurich Patch 7b/9, and Yokohama Patch 12 Hot Fix 1b/Patch 13. Security researchers emphasize the need for immediate patching to prevent full system compromise.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker NewsThree CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQLCVE-2026-6875
  2. BleepingComputerServiceNow warns of three max severity security vulnerabilitiesCVE-2026-6875
  3. Help Net SecurityWeek in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breachedCVE-2026-6875
  4. SecurityWeekExploitation of ServiceNow Vulnerability Seen Days After DisclosureCVE-2026-6875
  5. Help Net SecurityServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875)CVE-2026-6875
  6. The Hacker News⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and MoreCVE-2026-6875
  7. BleepingComputerCritical ServiceNow code execution flaw now exploited in attacksCVE-2026-6875
  8. SecurityWeekVulnerabilities Patched by Fortinet, Ivanti, ServiceNowCVE-2026-6875

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store