What’s Vulnerable › Products

ServiceNow AI Platform vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.

Check whether your ServiceNow AI Platform version is affected

Latest ServiceNow AI Platform vulnerabilities

• CVE-2026-103093 — Sandbox Escape via Table Rotation in ServiceNow AI Platform (CVSS 9.4)
• CVE-2026-6877 — Domain Separation Bypass in ServiceNow AI Platform (CVSS 5.3)
• CVE-2026-103094 — Cleartext Storage of OAuth Credentials in ServiceNow AI Platform (CVSS 7.1)
• CVE-2026-86860 — Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform (CVSS 9.3)
• CVE-2026-86859 — Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform (CVSS 8.7)
• CVE-2026-86858 — Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform (CVSS 8.7)
• CVE-2026-86857 — Authorization Bypass in ServiceNow AI Platform (CVSS 8.4)
• CVE-2026-13016 — Unauthenticated SQL Injection in ServiceNow AI Platform (CVSS 9.3)
• CVE-2026-74820 — Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause (CVSS 10.0)
• CVE-2026-6876 — Sandbox Escape in ServiceNow AI Platform (CVSS 10.0)
• CVE-2026-18886 — Unauthenticated Privilege Escalation via System Configuration Image Upload Processor (CVSS 10.0)
• CVE-2026-18885 — Unauthenticated Remote Code Execution in GraphQL Composite Data API (CVSS 10.0)
• CVE-2026-6875 — Sandbox Escape in ServiceNow AI Platform (CVSS 9.5)
• CVE-2026-0542 — Remote Code Execution in ServiceNow AI Platform (CVSS 9.2)
• CVE-2025-11450 — Reflected Cross Site Scripting in ServiceNow AI Platform (CVSS 5.3)
• CVE-2025-11449 — Reflected Cross Site Scripting in ServiceNow AI Platform (CVSS 5.3)
• CVE-2025-3089 — Broken Access Control in ServiceNow AI Platform (CVSS 5.3)