Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: ServiceNow AI Platform Australia Patch 2 Hot Fix 4b W32, Australia Patch 4 Hot Fix 3 and 5 more versions Clear all filters
TI-2026-59380 CVE-2026-86860 · GHSA-hm4f-jpr2-fpx4

Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform

Priority MEDIUM 48

ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00309 Published 2026-09-24 Fixed in Yokohama Patch 13 Hot Fix 5a, Zurich Patch 10 Hot Fix 3b +5 CWE-862
TI-2026-59379 CVE-2026-86859 · GHSA-hv69-7jxx-r484

Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform

Priority MEDIUM 43

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.003 Published 2026-09-24 Fixed in Yokohama Patch 13 Hot Fix 5a, Zurich Patch 10 Hot Fix 3b +5 CWE-284
TI-2026-11072 CVE-2026-13016 · GHSA-89wx-h2m8-fc58

Unauthenticated SQL Injection in ServiceNow AI Platform

Priority MEDIUM 42

ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00283 Published 2026-09-24 Fixed in Yokohama Patch 13 Hot Fix 5a, Zurich Patch 10 Hot Fix 3b +5 CWE-89
TI-2026-59378 CVE-2026-86858 · GHSA-g4fh-c3m5-g3pg

Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform

Priority MEDIUM 43

ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00283 Published 2026-09-24 Fixed in Yokohama Patch 13 Hot Fix 5a, Zurich Patch 10 Hot Fix 3b +5 CWE-284
TI-2026-59377 CVE-2026-86857 · GHSA-3g9f-q9vc-qffh

Authorization Bypass in ServiceNow AI Platform

Priority LOW 36

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform.

CVSS 4.0HIGH 8.4 Network Low privileges No interaction EPSS 0.00251 Published 2026-09-24 Fixed in Yokohama Patch 13 Hot Fix 5a, Zurich Patch 10 Hot Fix 3b +5 CWE-862