Back Techgig

ServiceNow Patches Max-Severity AI Platform Flaws; Urgent Enterprise Action Needed

Techgig • August 29, 2026

ServiceNow has released critical security patches for three maximum-severity vulnerabilities in its AI Platform, which could enable code injection, SQL injection, and privilege escalation attacks. These flaws, exploitable by unauthenticated actors with low complexity, necessitate immediate updates for engineering teams managing enterprise instances, particularly given past exploitation of similar vulnerabilities.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated attackers to execute arbitrary code remotely and affects versions 25.3.1 or earlier of Remote Support and 24.3.4 or earlier of Privileged Remote Access. Users are advised to apply the patches released on February 6, 2026, to mitigate the risk of exploitation. 860 sources 67

Extracted Entities

Attack Types (3)

Code Injection Privilege Escalation Sql Injection

CWE Weaknesses (3)

CWE-269 - Improper Privilege Management CWE-89 - SQL Injection CWE-94 - Code Injection