Skip to content

CVE-2026-0542

CVE

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
February 26, 2026
Last Seen
June 10, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A critical vulnerability in the ServiceNow AI Platform, tracked as CVE-2026-0542, has been patched. This flaw could enable unauthenticated attackers to execute arbitrary remote code within the platform’s sandbox environment, posing significant risks to organizations using the service.

ServiceNow confirmed a data breach on June 9, 2026, after attackers exploited an unauthenticated API endpoint, allowing access to sensitive customer data. The vulnerability, found in the endpoint '/api/now/related_list_edit/create', was due to a misconfiguration that set the 'requires_authentication...

Public Exploits

Checking GitHub for proof-of-concept code…