"We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so," the company said.
ServiceNow advisory and the patched CVEs
ServiceNow on Thursday released security updates for three maximum-severity vulnerabilities in its AI Platform and urged customers to secure self-hosted instances. The company said it patched its cloud-based platform against three critical flaws tracked as CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820. ServiceNow also addressed a related high-severity sandbox escape (CVE-2026-6876) affecting the same platform.
The vendor described the platform as the ServiceNow AI Platform (formerly known as the Now Platform), an enterprise-grade Platform-as-a-Service (PaaS) that helps integrate AI into core enterprise workflows and powers more than 100,000 enterprise AI apps at 85% of all Fortune 500 companies.
How the three maximum-severity flaws operate
ServiceNow’s advisory maps the three maximum-severity flaws to three different attack classes. One is a code injection vulnerability that can allow attackers to execute arbitrary code. A second stems from a separate code injection weakness that enables privilege escalation. The third permits threat actors to access or modify instance data through SQL injection attacks.
Crucially, the company said all three vulnerabilities can be exploited by unauthenticated threat actors in low-complexity attacks that do not require user interaction — a combination that raises the practical risk profile for unpatched environments and for self-hosted instances that may lag cloud patching cycles.
The cyber insurance questionnaire just landed. Now what?
SOC 2, HIPAA, insurance renewals - someone has to own security strategy. Nubivance provides fractional CISO leadership without the full-time salary.
Get a security leadSandbox escape and a recent disclosure tied to an API flaw
Alongside the three critical fixes, ServiceNow released a patch for CVE-2026-6876, described as a high-severity sandbox escape impacting the same platform. That issue could let attackers with basic privileges gain remote code execution on targeted systems, the advisory said.
ServiceNow also disclosed a separate security incident last month in which security researchers or customer-led research used an unauthenticated access flaw via a vulnerable API endpoint to query data from customer instances. The company characterized that event as a private disclosure and has advised customers to apply the available updates.
Context: recent attacks and exploit activity against ServiceNow
The Thursday advisory noted that while ServiceNow is not aware of active malicious exploitation of the newly patched flaws, the product family has been targeted previously. Two years ago, attackers chained three ServiceNow flaws (CVE-2024-4879, CVE-2024-5178, and CVE-2024-5217) using publicly available exploits to breach private firms and government agencies worldwide in data theft attacks. In July, threat intelligence company Defused reported that attackers were exploiting another critical vulnerability (CVE-2026-6875), a pre-auth sandbox escape in the ServiceNow AI Platform.
What this means for technologists, affected enterprises, and procurement leaders
- Technologists and security teams: The advisory underscores urgency — apply the cloud patches and prioritize securing self-hosted instances where cloud auto-updates may not apply. The combination of unauthenticated, low-complexity flaws that enable code execution, privilege escalation, or SQL injection elevates the threat posture for unpatched deployments.
- Affected enterprises and procurement leaders: Organizations that run the ServiceNow AI Platform — including environments that host more than 100,000 enterprise AI apps and platforms used by 85% of Fortune 500 companies, per the vendor — should verify patch levels, request confirmation from providers for self-hosted instances, and ensure contractual processes exist for rapid remediation of critical platform vulnerabilities.
- Adversaries and threat actors: Historical exploitation — including the 2024 chaining of three CVEs and the July 2026 exploitation reported by Defused — shows that publicly known ServiceNow flaws have been a target. The new advisory’s description of pre-auth, low-complexity attack paths provides clear indicators of how an attacker could approach unpatched systems.
ServiceNow’s advisory arrives against a broader measurement of defensive posture that the vendor referenced: the Blue Report 2026. The report notes that "overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply," and measures defenses technique by technique across 338 million simulations run in customer production environments. Those findings underscore that patching platform-level vulnerabilities is one part of a wider effort to prevent initial access and to limit attacker movement post-compromise.
For now, the company reports no confirmed malicious use of the newly patched vulnerabilities, but the platform’s scale — and the history of targeted attacks and exploited sandbox escapes — makes rapid patching and attention to self-hosted instance hygiene a practical necessity. Organizations that rely on the ServiceNow AI Platform should treat the advisory as immediate operational work: verify versions, apply updates, and audit any exposed API endpoints.
