CVE Tools
Track your stack

Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow

SecurityWeekBy Ionut Arghire

PatchFortiOSFortiProxy

Our summary

Fortinet, Ivanti, and ServiceNow have issued patches for a total of 15 vulnerabilities affecting their products. Among them is a critical remote code execution flaw in ServiceNow's AI platform (CVE-2026-6875), which could be exploited without authentication. Ivanti addressed two issues in its Xtraction tool (CVE-2026-14902 and CVE-2026-14903), involving open redirect and path traversal risks. Fortinet published 11 advisories covering multiple products like FortiOS and FortiSandbox, fixing high-severity bugs that could lead to information disclosure and unauthorized access. None of the companies reported active exploitation of these flaws.

Read at SecurityWeek

SecurityWeek publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker NewsThree CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQLCVE-2026-6875
  2. BleepingComputerServiceNow warns of three max severity security vulnerabilitiesCVE-2026-6875
  3. Help Net SecurityWeek in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breachedCVE-2026-6875
  4. SecurityWeekExploitation of ServiceNow Vulnerability Seen Days After DisclosureCVE-2026-6875
  5. The Hacker NewsCritical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code ExecutionCVE-2026-6875
  6. Help Net SecurityServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875)CVE-2026-6875
  7. The Hacker News⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and MoreCVE-2026-6875
  8. BleepingComputerCritical ServiceNow code execution flaw now exploited in attacksCVE-2026-6875

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store