VulnerabilityBleeping Computer
9.0 — CRITICAL
Critical ServiceNow code execution flaw now exploited in attacks
Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Attackers are exploiting a critical ServiceNow AI Platform vulnerability (CVE-2026-6875) that allows unauthenticated threat actors to execute code remotely within the platform, with confirmed in-the-wild exploitation observed days after patches were released.
⚙️Technical Details
💥Impact Assessment
Severity: Critical
Who Is at Risk
ServiceNow customers with unpatched instances of the AI Platform, particularly those with high-complexity attacks
🛡️Recommended Actions
1Immediately upgrade to a patched release of ServiceNow AI Platform
2Monitor for suspicious API requests and query logs
3Implement additional security controls, such as network segmentation and access controls
📦Affected Products
Product Name: ServiceNow AI PlatformAffected Software: TrueAffected Hardware: False
🔐NVD Verified DataVERIFIED
Weaknesses
CWE-94
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.