CyberConfirmedHighDevelopingFeatured

Critical pre-authentication sandbox escape vulnerability identified in ServiceNow AI platform

A critical vulnerability (CVE-2026-6875) in the ServiceNow AI platform is currently being exploited in the wild, allowing unauthenticated attackers to execute arbitrary code via a sandbox escape. The extent of the compromise remains uncertain, but the flaw poses a significant risk to self-hosted enterprise environments.

The Hacker Newsabout 12 hours agoCredibility 54%View source

Score Breakdown

Mosaic Score10.0

Confidence0.9

Significance0.8

Source credibility0.5

Intelligence Tags

#cybersecurity #vulnerability #servicenow #rce #exploit

Source

Part of 2 situations

developingCyber3m ago

Multiple Critical Vulnerabilities Actively Exploited Across Enterprise Software

Active exploitation of critical vulnerabilities in WordPress, ServiceNow AI, and Microsoft SharePoint is confirmed. These exploits enable webshell deployment, arbitrary code execution, and persistent access, posing significant risks to server integrity and enterprise environments. The scope of compromise and specific threat actor attribution remain largely uncertain.

↑ escalating·5 signals·USScore 7.6

activeJusticeCyber3m ago