Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-74820, CVE-2026-18885, CVE-2026-18886, CVE-2026-6876
By Omer Idel |
27 August 2026
ServiceNow AI platform SQL injection enables unauthenticated database query execution
A SQL injection in the ServiceNow AI platform could let an unauthenticated attacker send crafted requests to execute arbitrary SQL against the instance’s underlying database, enabling unauthorized read/modify of instance data. Apply ServiceNow’s August 2026 security update (managed instances are already patched. Partners/self-hosted must patch).
CVE IDs: CVE-2026-74820, CVE-2026-18885, CVE-2026-18886, CVE-2026-6876