DeutschShown in its original language — a full translation is planned for a future version.
ServiceNow AI Platform: Mehrere Schwachstellen
view advisory published 2026-09-24
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ServiceNow AI Platform ausnutzen, um unberechtigt auf Instanzdaten zuzugreifen, Daten zu erstellen, zu verändern oder zu löschen, beliebige SQL-Anweisungen gegen die zugrunde liegende Datenbank auszuführen und unter bestimmten Umständen seine Berechtigungen zu erweitern.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-86860US | —OT elevated | — | ||
ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certa… | ||||
| CVE-2026-86859US | — | — | ||
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticat… | ||||
| CVE-2026-86858US | — | — | ||
ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue could enable an unauthenticated user, in… | ||||
| CVE-2026-86857US | —OT elevated | — | ||
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an authenticated… | ||||
| CVE-2026-13016US | — | — | ||
ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circu… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan