ServiceNow security advisory (AV26-963)
Canada's Cyber Centre warns that multiple ServiceNow AI Platform versions need September 2026 security updates.
34
Product
ServiceNow AI Platform
- Mentions · 7d0
- Mentions · 30d0
- All mentions5
- First seenAug 28, 2026
- Last mentionedSep 25, 2026
Timeline
5 articles · newest firstCritical ServiceNow Vulnerabilities Let Attackers Bypass Authorization – Update Now!
ServiceNow patched five AI Platform flaws, including critical unauthenticated SQL injection, with no known exploitation.
76
ServiceNow Security Flaws Allow Attackers to Execute SQL and Modify Instance Data
ServiceNow patched five AI Platform flaws, including critical unauthenticated SQL injection and missing authorization.
72
How AI and cybersecurity are reshaping ServiceNow
Analysis argues ServiceNow's $7.75B Armis acquisition and AI-driven consumption pricing are reshaping its ITSM platform amid SaaS market anxiety.
45
Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
ServiceNow patched four AI Platform flaws, including three pre-authentication CVSS 10.0 issues enabling unauthenticated code execution, SQL injection, and privilege escalation.
70
Related CVEs
by mentions- Unauthenticated SQL Injection in ServiceNow AI Platform (CVSS 9.3)
- Missing Authorization in ServiceNow AI Platform Allows Unauthenticated Data Exposure
- Unauthenticated Authorization Bypass in ServiceNow AI Platform (CVSS 8.7)
- Unauthenticated Data Tampering in ServiceNow AI Platform
- Authorization Bypass in ServiceNow AI Platform Lets Users Read Unauthorized Data
- CVE-2026-74820<1%10.0Unauthenticated SQL Injection in ServiceNow AI Platform
- CVE-2026-6876<1%10.0Unauthenticated Sandbox Escape Allows Code Execution in ServiceNow AI Platform
- CVE-2026-18885<1%10.0Unauthenticated Code Injection in ServiceNow AI Platform (CVSS 10.0)
- CVE-2026-18886<1%10.0Improper Access Control (Privilege Escalation) in ServiceNow AI Platform
- CVE-2026-68751%9.5Unauthenticated Remote Code Execution in ServiceNow AI Platform
Appears with
- ServiceNowvendor · 5
- ServiceNoworganization · 2
- Vezavendor · 1
- Lionfish Tech Advisorsorganization · 1
- Searchlight Cyberorganization · 1
- Armisvendor · 1
- AI Control Towerproduct · 1
- Canadian Centre for Cyber Securityorganization · 1
- Element AIvendor · 1
- NISTorganization · 1
- Passage AIvendor · 1
- Virtual Agentproduct · 1
- Loom Systemsvendor · 1
- CISAorganization · 1
- Mission Securevendor · 1
- Defusedorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.