Three critical unauthenticated RCE vulnerabilities identified in ServiceNow platforms

ServiceNow has disclosed three vulnerabilities with a maximum CVSS score of 10.0, allowing for unauthenticated arbitrary code execution, privilege escalation, and SQL injection. While the vendor reports no evidence of active exploitation, the severity and lack of authentication requirements present a high risk for enterprise infrastructure.