Advisories · Technology

ServiceNow AI Platform.

Every CVE that names ServiceNow AI Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103093 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Sandbox Escape via Table Rotation in ServiceNow AI Platform
- ServiceNow AI Platform
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-6877 CVE record

CVSS 5.3 Medium

Domain Separation Bypass in ServiceNow AI Platform
- ServiceNow AI Platform
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-103094 CVE record

CVSS 7.1 High

Cleartext Storage of OAuth Credentials in ServiceNow AI Platform
- ServiceNow AI Platform
- CWE-256
Not analysed yet 29 Oct 2026
CVE-2026-86860 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform
- ServiceNow AI Platform
- Broken access control
Not analysed yet 24 Sept 2026
CVE-2026-86859 CVE record

CVSS 8.7 High

Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform
- ServiceNow AI Platform
- Broken access control
Not analysed yet 24 Sept 2026
CVE-2026-13016 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Unauthenticated SQL Injection in ServiceNow AI Platform
- ServiceNow AI Platform
- SQL injection
Not analysed yet 24 Sept 2026
CVE-2026-86858 CVE record

CVSS 8.7 High

Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform
- ServiceNow AI Platform
- Broken access control
Not analysed yet 24 Sept 2026
CVE-2026-86857 CVE record

CVSS 8.4 High

Authorization Bypass in ServiceNow AI Platform
- ServiceNow AI Platform
- Broken access control
Not analysed yet 24 Sept 2026
CVE-2026-74820 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause
- ServiceNow AI Platform
- SQL injection
Not analysed yet 27 Aug 2026
CVE-2026-18886 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Unauthenticated Privilege Escalation via System Configuration Image Upload Processor
- ServiceNow AI Platform
- Broken access control
Not analysed yet 27 Aug 2026
CVE-2026-18885 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Unauthenticated Remote Code Execution in GraphQL Composite Data API
- ServiceNow AI Platform
- Code injection
Not analysed yet 27 Aug 2026
CVE-2026-6876 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Sandbox Escape in ServiceNow AI Platform
- ServiceNow AI Platform
- Code injection
- CWE-693
Not analysed yet 27 Aug 2026
CVE-2026-6875 CVE record

CVSS 9.5 CriticalCritical · CVSS 9+

Sandbox Escape in ServiceNow AI Platform
- ServiceNow AI Platform
- Code injection
Not analysed yet 13 Jul 2026
CVE-2026-0542 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Remote Code Execution in ServiceNow AI Platform
- ServiceNow AI Platform
- CWE-653
Not analysed yet 25 Feb 2026
CVE-2025-11449 CVE record

CVSS 5.3 Medium

Reflected Cross Site Scripting in ServiceNow AI Platform
- ServiceNow AI Platform
- Cross-site scripting (XSS)
Not analysed yet 10 Oct 2025
CVE-2025-11450 CVE record

CVSS 5.3 Medium

Reflected Cross Site Scripting in ServiceNow AI Platform
- ServiceNow AI Platform
- Cross-site scripting (XSS)
Not analysed yet 10 Oct 2025
CVE-2025-3089 CVE record

CVSS 5.3 Medium

Broken Access Control in ServiceNow AI Platform
- ServiceNow AI Platform
- Broken access control
Not analysed yet 12 Aug 2025