CyberConfirmedHighDevelopingFeatured

Critical pre-authentication sandbox escape vulnerability identified in ServiceNow AI platform

A critical vulnerability (CVE-2026-6875) in the ServiceNow AI platform is currently being exploited in the wild, allowing unauthenticated attackers to execute arbitrary code via a sandbox escape. The extent of the compromise remains uncertain, but the flaw poses a significant risk to self-hosted enterprise environments.

The Hacker News2 days agoCredibility 54%View source

Score Breakdown

Mosaic Score10.0

Confidence0.9

Significance0.8

Source credibility0.5

Intelligence Tags

#cybersecurity #vulnerability #servicenow #rce #exploit

Source

Part of a situation

developingCyber6h ago

Multiple Enterprise Software Vulnerabilities Actively Exploited

Threat actors are actively exploiting critical vulnerabilities across multiple enterprise software platforms, including SharePoint, WordPress, and ServiceNow. This represents a confirmed, sustained, and coordinated campaign targeting enterprise infrastructure, with high confidence in active exploitation. The scope of compromise and specific threat actor attribution remain largely uncertain.

↑ escalating·3 signalsScore 8.0