Vendor

ServiceNow

Vulnerabilities and exploitation targeting ServiceNow's platform and its AI Platform / Now Assist surfaces — a high-value enterprise SaaS foothold that frequently holds sensitive IT, HR, and workflow data across large organizations.

CVEs

CVE-2026-6875

[ CRITICAL ] CVSS 9.5 exploited-in-wild

ServiceNow AI Platform unauthenticated remote code execution

An unauthenticated attacker can, under certain circumstances, execute code on the ServiceNow AI Platform. Patched by ServiceNow on hosted instances; self-hosted customers and partners must apply the shipped updates.

ServiceNow / ServiceNow AI Platform Jul 13

Articles

~/articles/2026-07-20-servicenow-ai-platform-cve-2026-6875-defused-exploitation

● Breaking

servicenow

ServiceNow AI Platform RCE exploited in wild: CVE-2026-6875

Threat-intel firm Defused reports active exploitation of ServiceNow AI Platform CVE-2026-6875, a week after ServiceNow said it saw none.

Jul 20 read →