Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: ServiceNow AI Platform Australia Patch 2 Hot Fix 3, Australia Patch 3 Hot Fix 2 and 13 more versions Clear all filters
TI-2026-52569 CVE-2026-74820 · GHSA-75mr-vw8w-4mx8

Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause

Priority MEDIUM 57

ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.05148 Published 2026-08-27 Fixed in Xanadu Patch 11 Hot Fix 7a, Yokohama Patch 12 Hot Fix 3b +13 CWE-89
TI-2026-15447 CVE-2026-18885 · GHSA-pc3p-j9w8-jrpg

Unauthenticated Remote Code Execution in GraphQL Composite Data API

Priority MEDIUM 59

ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.07241 Published 2026-08-27 Fixed in Xanadu Patch 11 Hot Fix 7a, Yokohama Patch 12 Hot Fix 3b +13 CWE-94
TI-2026-06032 CVE-2026-6876 · GHSA-7fw9-72q7-3g7j

Sandbox Escape in ServiceNow AI Platform

Priority MEDIUM 44

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00677 Published 2026-08-27 Fixed in Xanadu Patch 11 Hot Fix 7a, Yokohama Patch 12 Hot Fix 3b +13 CWE-1284