InfoSecBulletin Cybersecurity for mankind
ServiceNow issued security updates for three new serious AI Platform problems that can be used in code injection, SQL injection, and privilege escalation attacks.
The ServiceNow AI Platform, which was once called the Now Platform, is a strong Platform-as-a-Service (PaaS). It helps add AI to important business tasks and supports over 100,000 business AI apps at 85% of all Fortune 500 companies.
ServiceNow warns of three critical security vulnerabilities
100+ Tech and Security Orgs Urge Global Cyber Defense Boost Against AI Threats
8.7 Million Customers data exposed from 3 Airports
Crack 85 Accounts and Steal 2,500+ Records
8-Agent AI Framework Used to Compromise Gov’t Entities in Asia
270+ Zimbra servers compromised in continuous attacks
Singapore Approves 200MW Data-Centre Expansion Under Second Call
Chameleon SEO Poisoning
Hackers poison Bing and Google search results to deliver phishing banking pages
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
In a Thursday update, the company said it fixed its cloud platform for three major security issues (CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820) and told customers to protect their self-hosted systems.
The first flaw lets attackers run unwanted code. The second comes from a flaw that lets them gain higher access. The third lets bad actors reach or change data using SQL injection attacks.
All three security problems can be used by unauthorized attackers in simple attacks that don’t need user action.
On Thursday, ServiceNow shared about a security flaw (CVE-2026-6876) in its platform. This issue could allow attackers with basic access to run code on targeted systems.
“We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so,” the company said.
ServiceNow did not say that any of the flaws fixed on Thursday were being used in attacks, but many security issues in ServiceNow products have been attacked in the past few years.
Two years ago, bad actors used three ServiceNow problems (CVE-2024-4879, CVE-2024-5178, and CVE-2024-5217) with open-source exploits to steal data from private companies and government groups around the world.
More recently, in July, the threat intelligence company Defused said that hackers are now using another serious flaw (CVE-2026-6875). This flaw lets them escape the sandbox in the ServiceNow AI Platform before logging in.
ServiceNow shared in private that there was a security issue last month. This issue happened when security researchers or customers used a weakness in an API to get data from customer accounts without permission.
