InfoSecBulletin Cybersecurity for mankind
ServiceNow issued security updates for three new serious AI Platform problems that can be used in code injection, SQL injection, and privilege escalation attacks.
The ServiceNow AI Platform, which was once called the Now Platform, is a strong Platform-as-a-Service (PaaS). It helps add AI to important business tasks and supports over 100,000 business AI apps at 85% of all Fortune 500 companies.
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
Anthropic prepares “Claude Money” to analyze bank account and financial data
GhostCode Phishing Kit Evades Microsoft 365 MFA to Hijack Accounts in 78 Seconds
CISA Warns of Cisco Secure Email Gateway 0-Day Flaw Actively Exploited in Attacks
VPN flaw exposed 246,000 personnel records in japan
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
In a Thursday update, the company said it fixed its cloud platform for three major security issues (CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820) and told customers to protect their self-hosted systems.
The first flaw lets attackers run unwanted code. The second comes from a flaw that lets them gain higher access. The third lets bad actors reach or change data using SQL injection attacks.
All three security problems can be used by unauthorized attackers in simple attacks that don’t need user action.
On Thursday, ServiceNow shared about a security flaw (CVE-2026-6876) in its platform. This issue could allow attackers with basic access to run code on targeted systems.
“We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so,” the company said.
ServiceNow did not say that any of the flaws fixed on Thursday were being used in attacks, but many security issues in ServiceNow products have been attacked in the past few years.
Two years ago, bad actors used three ServiceNow problems (CVE-2024-4879, CVE-2024-5178, and CVE-2024-5217) with open-source exploits to steal data from private companies and government groups around the world.
More recently, in July, the threat intelligence company Defused said that hackers are now using another serious flaw (CVE-2026-6875). This flaw lets them escape the sandbox in the ServiceNow AI Platform before logging in.
ServiceNow shared in private that there was a security issue last month. This issue happened when security researchers or customers used a weakness in an API to get data from customer accounts without permission.
