#servicenow


Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

Aug 28, 2026 // 14:30

ServiceNow has released patches for four security flaws impacting the ServiceNow AI Platform, three of them rated 10.0 on the CVSS scoring system and exploitable, […]

ServiceNow warns of three max severity security vulnerabilities

Aug 28, 2026 // 13:36

ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code injection, SQL injection, and privilege escalation attacks. The […]

One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

Aug 18, 2026 // 14:36

A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according […]

“City-Forum” data-theft attacks target Salesforce, ServiceNow portals

Aug 13, 2026 // 02:17

An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals.  The data-theft campaign, […]

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

Jul 21, 2026 // 09:38

Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber. In a post shared on X, […]

Critical ServiceNow code execution flaw now exploited in attacks

Jul 20, 2026 // 12:36

Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused. Formerly known as the Now Platform, […]

ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances

Jun 10, 2026 // 10:20

ServiceNow has warned about a security incident in which unknown threat actors exploited a flaw to obtain deeper unauthorized access to susceptible instances. “On June […]

ServiceNow discloses security incident exposing customer data

Jun 10, 2026 // 00:36

ServiceNow is warning about a security incident after attackers exploited an unauthenticated access flaw through a vulnerable API endpoint, allowing them to query data from […]