SECURITYJul 21 · 06:29 UTCTHE HACKER NEWS[email protected] (The Hacker News)

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

Threat actors are exploiting a critical sandbox escape vulnerability (CVE-2026-6875) in ServiceNow AI Platform, allowing unauthenticated users to execute arbitrary code. Defused Cyber reported active exploitation of the flaw, which carries a CVSS score of 9.5. Patches for the vulnerability have been released.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

Defused CyberorganizationServiceNow AI PlatformtopicCVE-2026-6875topic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYJul 20 · 09:29 UTC
Critical ServiceNow code execution flaw now exploited in attacks
SECURITYApr 21 · 10:52 UTC
Google Fixes Critical RCE Flaw in AI-Based Antigravity Tool
SECURITYJun 16 · 18:27 UTC
Three critical Fortinet sandbox bugs splattered by unknown attackers
SECURITYApr 20 · 21:17 UTC
Vuln in Google’s Antigravity AI agent manager could escape sandbox, give attackers remote code execution
SECURITYApr 22 · 07:16 UTC
Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape
SECURITYApr 7 · 17:02 UTC
Max severity Flowise RCE vulnerability now exploited in attacks