ServiceNow patches three maximum severity flaws inside its AI agent platform

In this article, we review three gaps classified as 10.0 on the CVSS scale in the ServiceNow platform. Three gaps in the CVSS 10.0 in the ServiceNow may allow unapproved attackers to implement the software instructions. SQL has issued corrections to four security gaps affecting the ServiceNow AI platform, three of which are classified... the article has revealed CVSS 10.0 gaps in the ServiceNow: serious threats to users first on the Antarctic Ro…

ServiceNow has issued security advisories for four vulnerabilities, including critical flaws in its AI platform. These vulnerabilities could allow unauthenticated attackers to execute arbitrary code, manipulate instance data, elevate privileges, or run SQL commands against underlying databases. On August 27, 2026, the company published KB3152242, which covers CVE-2026-6876, CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820. ServiceNow reported …

ServiceNow disclosed four security vulnerabilities on August 27, three rated a perfect 10.0 on the CVSS scale, that let unauthenticated attackers execute code, alter data, or run arbitrary SQL inside its AI Platform. The flaws sat inside the exact infrastructure ServiceNow is pitching to enterprises for autonomous AI agents, and while patches are out for the Xanadu, Yokohama, and Zurich releases, the company says it isn't aware of active exploit…

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage