ServiceNow Now Platform und AI Platform: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in ServiceNow Now Platform und ServiceNow AI Platform ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen oder SQL-Injection-Angriffe durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-30604 linked CVEs
Open advisory with all CVEs
More on ServiceNow
Other advisories
- CriticalCVE-2026-13016ServiceNow AI Platform: Mehrere Schwachstellen
- HighCVE-2026-86859ServiceNow AI Platform: Sicherheitslücke
- HighCVE-2026-86858ServiceNow AI Platform: Rechteausweitung
- CriticalCVE-2026-86860ServiceNow AI Platform: fehlende Autorisierung
- CriticalCVE-2026-86860ServiceNow AI Platform: fehlende Autorisierung
- HighCVE-2026-86859ServiceNow AI Platform: Sicherheitslücke
- CriticalCVE-2026-13016ServiceNow hat eine SQL-Injection-Schwachstelle behoben, die in der ServiceNow AI Platform identifiziert wurde.
- CriticalCVE-2026-13016ServiceNow AI Platform: SQL-Injection
Other news entries
- ServiceNow AI Platform: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- How AI and cybersecurity are reshaping ServiceNowNewsCSO Online
- ServiceNow Patches 3 Critical Code Injection VulnerabilitiesNewsSecurityWeek
- ServiceNow patches three maximum severity flaws that could put enterprise data at riskNewsCSO Online
- Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQLNewsThe Hacker News
- ServiceNow warns of three max severity security vulnerabilitiesNewsBleepingComputer
- One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025NewsThe Hacker News
- Salesforce, ServiceNow data targeted in ‘City-Forum’ attacksNewsCSO Online
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3060
ID