CVE-2026-6875

ServiceNow disclosed three CVSS 10.0 vulnerabilities in its AI Platform on August 27, 2025, including code injection (CVE-2026-18885), access control bypass (CVE-2026-18886), and SQL injection (CVE-20…

Attackers are actively exploiting CVE-2026-6875, a critical sandbox escape in the ServiceNow AI Platform that allows unauthenticated remote code execution. The flaw, disclosed by Searchlight Cyber and…

Attackers are actively exploiting CVE-2026-6875, a critical pre-authentication remote code execution vulnerability in the ServiceNow AI Platform, according to threat intelligence firm Defused. The fla…