CyberSIXT Search
Vendor

ServiceNow

No CISA KEV deadline is open. CISA last added a ServiceNow CVE on 29 Jul 2024.

Tracked since 14 Jul · latest article Fri 25 Sep · RSS

Added to KEV · 90 days
0
of 2 in the full CISA catalogue · all time
High exploit odds · current
0
EPSS top 5%, not in KEV
Articles · 7 days
0
none this week

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2024-4879not in CyberSIXT coverageUtah, Vancouver, and Washington DC Now Platform29 Jul 2024Deadline passed 19 Aug 2024
CVE-2024-5217not in CyberSIXT coverageUtah, Vancouver, and Washington DC Now Platform29 Jul 2024Deadline passed 19 Aug 2024

Products

2 products · 10 CVEs in coverage
Utah, Vancouver, and Washington DC Now Platform0 CVEs · 2 in KEVAI Platform10 CVEs · 0 in KEVlatest 25 Sep

Coverage

8 articles · all timeFull timeline

8 articles from 4 outlets since 14 Jul; the latest 31 days ago.

ServiceNow: coverage over time8 articles from 4 outlets. First report 14 Jul by SecurityOnline. Busiest week: 3 articles, week of 20 Jul. 0 in the last 7 days. ServiceNow: coverage over time8 articles from 4 outlets. First report 14 Jul by SecurityOnline. Busiest week: 3 articles, week of 20 Jul. 0 in the last 7 days.
  • Article
  • First report
Show as table
ServiceNow: articles
Published (UTC)OutletHeadline
Fri 25 Sep · 03:47 UTCSecurityOnlineServiceNow Patches Critical AI Platform Flaws Enabling Data Theft
Mon 31 Aug · 14:21 UTCSecurityWeekServiceNow patches critical code execution flaws today
Tue 21 Jul · 12:32 UTCSOCRadarCVE-2026-6875 Hits ServiceNow AI Platform
Tue 21 Jul · 09:10 UTCSecurityWeekServiceNow patches AI sandbox flaw CVE-2026-6875 as exploits rise
Tue 21 Jul · 06:51 UTCSecurity AffairsAttackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875
Sat 18 Jul · 13:26 UTCSecurityOnlineUrgent ServiceNow AI Platform Bug Allows Remote Command Execution
Wed 15 Jul · 11:52 UTCSecurityWeekFortinet, Ivanti and ServiceNow patch unauth RCE and other flaws
Tue 14 Jul · 03:01 UTCSecurityOnlineCVE-2026-6875: Critical ServiceNow Sandbox Escape Allows Unauthenticated Remote Code Execution

Who reported 4 outlets, last 12 months

  • SecurityOnline3
  • SecurityWeek3
  • Security Affairs1
  • SOCRadar1
  1. ServiceNow Patches Critical AI Platform Flaws Enabling Data TheftSecurityOnline
  2. ServiceNow patches critical code execution flaws todaySecurityWeek
  3. CVE-2026-6875 Hits ServiceNow AI PlatformSOCRadar
  4. ServiceNow patches AI sandbox flaw CVE-2026-6875 as exploits riseSecurityWeek
  5. Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875Security Affairs
  6. Urgent ServiceNow AI Platform Bug Allows Remote Command ExecutionSecurityOnline
  7. Fortinet, Ivanti and ServiceNow patch unauth RCE and other flawsSecurityWeek
  8. CVE-2026-6875: Critical ServiceNow Sandbox Escape Allows Unauthenticated Remote Code ExecutionSecurityOnline

All CVEs in coverage

10
CVE-2026-18885Unauthenticated Remote Code Execution in GraphQL Composite Data APICVSS10.0Critical–Not in KEV7.2%EPSS1article
CVE-2026-74820Unauthenticated SQL Injection via Dynamic Schema ORDER BY ClauseCVSS10.0Critical–Not in KEV5.2%EPSS1article
CVE-2026-18886Unauthenticated Privilege Escalation via System Configuration Image Upload ProcessorCVSS10.0Critical–Not in KEV5.0%EPSS1article
CVE-2026-6875Sandbox Escape in ServiceNow AI PlatformCVSS9.5Critical–Not in KEV1.4%EPSS6articles
CVE-2026-6876Sandbox Escape in ServiceNow AI PlatformCVSS8.7High–Not in KEV0.6%EPSS1article
CVE-2026-86860Unauthenticated Sensitive Data Disclosure in ServiceNow AI PlatformCVSS9.3Critical–Not in KEV0.3%EPSS1article
CVE-2026-13016Unauthenticated SQL Injection in ServiceNow AI PlatformCVSS9.3Critical–Not in KEV0.3%EPSS1article
CVE-2026-86859Unauthenticated Arbitrary Record Disclosure in ServiceNow AI PlatformCVSS8.7High–Not in KEV0.3%EPSS1article
CVE-2026-86858Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI PlatformCVSS8.7High–Not in KEV0.3%EPSS1article
CVE-2026-86857Authorization Bypass in ServiceNow AI PlatformCVSS8.4High–Not in KEV0.2%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device