Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
ServiceNow confirmed a data breach on June 9, 2026, after attackers exploited an unauthenticated API endpoint, allowing access to sensitive customer data. The vulnerability, found in the endpoint '/api/now/related_list_edit/create', was due to a misconfiguration that set the 'requires_authentication...
Snyk has introduced Evo Continuous Offensive Security (COS), an AI-driven pentesting solution aimed at addressing the expanding attack surface created by accelerated software development. This new tool enables continuous testing of applications and provides validated insights into potential exploits...
A critical vulnerability (CVE-2025-12420) in the ServiceNow AI Platform allows unauthenticated attackers to impersonate legitimate users and perform unauthorized operations. Discovered by AppOmni in October 2025, this privilege escalation flaw has prompted immediate remediation efforts by ServiceNow...
AppOmni identified a critical security vulnerability in ServiceNow's AI platform that could allow unauthenticated users to impersonate legitimate users and perform unauthorized actions. The flaw, designated CVE-2025-12420, was discovered in October 2025 and had a severity score of 9.3 out of 10. Ser...
.webp)
