{"id":9253,"date":"2026-08-28T22:59:31","date_gmt":"2026-08-28T22:59:31","guid":{"rendered":"https:\/\/cybersecurityinfocus.com\/?p=9253"},"modified":"2026-08-28T22:59:31","modified_gmt":"2026-08-28T22:59:31","slug":"servicenow-patches-three-maximum-severity-flaws-that-could-put-enterprise-data-at-risk","status":"publish","type":"post","link":"https:\/\/cybersecurityinfocus.com\/?p=9253","title":{"rendered":"ServiceNow patches three maximum severity flaws that could put enterprise data at risk"},"content":{"rendered":"
\n
\n
\n
\n
<\/div>\n

Code injection and SQL injection attacks have been around for decades, and they are still tried-and-true ways for attackers to compromise systems.<\/p>\n

ServiceNow\u2019s latest trio of maximum severity flaws shows that even AI-era platforms remain vulnerable to these techniques: The software provider has released patches for three bugs in its ServiceNow AI Platform that could be exploited via low-complexity code injection, SQL injection, and privilege escalation attacks, with no user interaction required.<\/p>\n

Although its cloud-based instances have already been updated, ServiceNow advises self-hosted customers to upgrade or patch immediately.<\/p>\n

\u201cYou never want to see a 10\/10 critical,\u201d said David Shipley<\/a> of Beauceron Security. \u201cAnd you really don\u2019t want to see three drop in row unless it\u2019s an Olympic judging panel.\u201d<\/p>\n

Gives attackers the ability to access, modify and create data<\/h2>\n

The ServiceNow AI Platform, formerly the Now Platform, combines AI and autonomous agents, data, and security and governance controls across enterprise IT, employee, and customer relationship management (CRM) workflows. <\/p>\n

That makes it a juicy target for attackers.<\/p>\n

The three critical vulnerabilities now being patched are tracked as CVE-2026-18885<\/a>, CVE-2026-18886<\/a>, and CVE-2026-74820<\/a>. CVE-2026-18885 would allow unauthenticated users to execute arbitrary code and access and\/or modify instance data. CVE-2026-18886 could give malicious actors the ability to create or change instance data and escalate privileges, and the CVE-2026-74820 vulnerability could allow attackers to execute arbitrary SQL statements against an instance\u2019s underlying database to alter data.<\/p>\n

Along with these, ServiceNow also patched the high-severity CVE-2026-6876<\/a>, a sandbox escape vulnerability impacting ServiceNow AI. This vulnerability could allow attackers with basic privileges to perform remote code execution (RCE).<\/p>\n

ServiceNow said in its advisory<\/a> that it was \u201cnot currently aware of exploitation\u201d of any of the flaws. The company has released patches for all four, for impacted Xanadu, Yokohama, and Zurich versions of the platform.<\/p>\n

Recently, ServiceNow has also issued patches for several other critical vulnerabilities, including June\u2019s API issue<\/a> and last month\u2019s \u00a0CVE-2026-6875<\/a>, a pre-authentication sandbox escape<\/a> in its AI Platform. Like the vulnerabilities disclosed this week, it could allow unauthenticated users to execute code. And earlier this month, independent research also identified attacks exposing company data<\/a>.<\/p>\n

Concerning severity and accessibility<\/h2>\n

What makes the current vulnerabilities particularly serious is the combination of severity and accessibility, noted Ensar Seker<\/a>, CISO at SOCRadar; exploitation can potentially occur without authentication.<\/p>\n

\u201cThat means an attacker may not need to steal credentials or compromise an employee before attempting to exploit the platform,\u201d Seker said, noting that CVE-2026-18885 is especially concerning because it could support arbitrary code execution through the GraphQL Composite Data API. This means that, in a successful attack, \u201ccode injection can effectively turn a trusted enterprise application into an attacker-controlled execution environment,\u201d he pointed out.<\/p>\n

CVE-2026-74820 presents a different, but equally serious risk, he said. With SQL injection, an attacker can interact with an underlying database in unintended ways, potentially reading, manipulating, or destroying data.<\/p>\n

In general, code injection and SQL injection attacks are dangerous because they break fundamental security boundaries between data supplied by a user and instructions executed by a system, Seker explained. Once attacker-controlled input is interpreted as code or a database command, application-level access controls may no longer be adequate.<\/p>\n

Then, he noted, there\u2019s the role ServiceNow plays inside enterprises that use it across their operations, assets, approvals, and integrations. Successful attackers can not only gain access to sensitive operational data, but move laterally and abuse trusted customer and partner workflows and integrations.<\/p>\n

\u201cCompromising that type of platform can therefore be much more significant than compromising a standalone application,\u201d he said. Attackers targeting platforms with extensive integrations may be more interested in the credentials, tokens, and systems connected to them, rather than just the platform itself.<\/p>\n

Patch, but also verify external integrations<\/h2>\n

The immediate priority for enterprises is to determine which ServiceNow instances and versions they operate, and confirm they have been patched, Seker advised. Security teams should also inventory ServiceNow integrations, APIs, and highly privileged service accounts.<\/p>\n

Further, he said, teams should review historical telemetry for indicators of attempted exploitation, like unusual requests involving affected APIs and upload functionality. They should also look for unexpected administrative or privilege changes, unexplained creation or modification of records, anomalous service-account behavior, and unusual access to sensitive ServiceNow data. If suspicious activity is flagged, look for downstream systems connected to ServiceNow rather than treating it as an isolated application.<\/p>\n

Overall, Seker noted, AI changes the economics of vulnerability exploitation more than it changes the underlying vulnerability. Attackers are using AI to analyze disclosures, generate and modify exploit attempts, enumerate exposed services, adapt payloads to different environments, and automate post-exploitation activity.<\/p>\n

Work to reduce time to remediation<\/h2>\n

\u201cThe period between public disclosure and widespread exploitation can therefore become increasingly compressed,\u201d Seker said. This means organizations should work to reduce time between disclosure, exposure assessment, and remediation.<\/p>\n

This requires strong API authentication and authorization, strict input validation, parameterized database queries, least-privilege access, integration segmentation, application and API-layer monitoring, and controls that detect anomalous behavior, he emphasized. Internet-facing interfaces should also be minimized.<\/p>\n

But injection vulnerabilities are not new, he observed. Established controls like secure coding and static and dynamic API and adversarial testing prior to production can help eliminate weaknesses.<\/p>\n

Also assume that AI will continue to automate threat actors\u2019 vulnerability discovery and exploitation, he added. By that token, defenders should implement similar automation around asset discovery, exposure validation, and remediation.<\/p>\n

In addition, security teams should not evaluate SaaS and enterprise platforms solely on their traditional vulnerability-management processes. Risk should be assessed on their blast radius: The data they contain, the systems, credentials, and APIs they access, and what an attacker could do, Seker said.<\/p>\n

Accessibility, no interaction required<\/h2>\n

Beauceron\u2019s Shipley pointed out that, while these vulnerability disclosures are critical for builders, they present a conundrum: Attackers now know about them, too. Within 15 minutes of ServiceNow\u2019s publication, if not sooner, they were likely exploiting the flaws.<\/p>\n

While there was no previous evidence of exploit attempts, \u201cyou can take it to the bank that these are getting worked now,\u201d he said. Unauthenticated access and network accessibility can create a \u201csweet exploit chain,\u201d and low complexity exploits with no interaction required \u201cmake security professionals\u2019 blood run cold.\u201d<\/p>\n

\u201cSQL injection is part of the OG group of web vulnerabilities that just keep on delivering,\u201d he pointed out. Billions of lines of code still contain basic failings like these, revealing a lack of incentive on the part of software makers to ship secure code. \u201cUntil we change that,\u201d he said, \u201cthe so-called Vulnpocalypse is here to stay.\u201d<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"

Code injection and SQL injection attacks have been around for decades, and they are still tried-and-true ways for attackers to compromise systems. ServiceNow\u2019s latest trio of maximum severity flaws shows that even AI-era platforms remain vulnerable to these techniques: The software provider has released patches for three bugs in its ServiceNow AI Platform that could […]<\/p>\n","protected":false},"author":0,"featured_media":9254,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-9253","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-education"],"_links":{"self":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/9253"}],"collection":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9253"}],"version-history":[{"count":0,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/9253\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/media\/9254"}],"wp:attachment":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}