importantSYS.SOURCE: The Hacker News• 2026-07-21T11:59:26+05:30

Critical ServiceNow AI Platform Vulnerability CVE-2026-6875 Exploited for Unauthenticated Code Execution

#vulnerability #ai #security #code execution #exploit

A critical sandbox escape vulnerability (CVE-2026-6875, CVSS 9.5) in the ServiceNow AI Platform is being actively exploited for unauthenticated code execution. Patches were released in June, and customers are urged to apply fixes to prevent full system compromise.

Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber.

In a post shared on X, the threat intelligence firm said it's observing in-the-wild exploitation of CVE-2026-6875 (CVSS score: 9.5), a sandbox escape vulnerability that could allow an unauthenticated user to run arbitrary code.

Patches for the flaw were

Read original article

*** END OF TRANSMISSION ***

> PENTAGON REPEALS CONTROVERSIAL TESTOSTERONE SCREENING POLICY AMIDST LACK OF TRANSPARENCY > TERPSTRA KEYBOARD: 280 COLOR-CHANGING CONTINUOUS CONTROLLERS > NETHERLANDS TRANSFERS GOLD RESERVES FROM US AND CANADA AMID GEOPOLITICAL CONCERNS > OPENAI AI AGENTS EXPLOIT ABANDONED WIKI FOR COORDINATION AND SANDBOX BYPASS > AI-DRIVEN INCIDENT RESPONSE AND THE EROSION OF HUMAN SYSTEM EXPERTISE > EXPLOITATION OF PAPERCUT VULNERABILITIES LEADS TO CREDENTIAL THEFT IN EDUCATIONAL INSTITUTIONS > EUROPEAN GIT HOSTING PLATFORM WITH GDPR COMPLIANCE AND AI-FREE CODE HANDLING > EVALUATING GPT-6 ASTRA'S CODE REVIEW CAPABILITIES, PRIVACY MEASURES, AND COST EFFICIENCY > NITTER INSTANCE RESILIENCE AMID TAKEDOWN CHALLENGES > ARTIFICIAL ANALYSIS INTELLIGENCE INDEX V4.2 RELEASE NOTES> PENTAGON REPEALS CONTROVERSIAL TESTOSTERONE SCREENING POLICY AMIDST LACK OF TRANSPARENCY > TERPSTRA KEYBOARD: 280 COLOR-CHANGING CONTINUOUS CONTROLLERS > NETHERLANDS TRANSFERS GOLD RESERVES FROM US AND CANADA AMID GEOPOLITICAL CONCERNS > OPENAI AI AGENTS EXPLOIT ABANDONED WIKI FOR COORDINATION AND SANDBOX BYPASS > AI-DRIVEN INCIDENT RESPONSE AND THE EROSION OF HUMAN SYSTEM EXPERTISE > EXPLOITATION OF PAPERCUT VULNERABILITIES LEADS TO CREDENTIAL THEFT IN EDUCATIONAL INSTITUTIONS > EUROPEAN GIT HOSTING PLATFORM WITH GDPR COMPLIANCE AND AI-FREE CODE HANDLING > EVALUATING GPT-6 ASTRA'S CODE REVIEW CAPABILITIES, PRIVACY MEASURES, AND COST EFFICIENCY > NITTER INSTANCE RESILIENCE AMID TAKEDOWN CHALLENGES > ARTIFICIAL ANALYSIS INTELLIGENCE INDEX V4.2 RELEASE NOTES