CVE-2026-18886 Unauthenticated Privilege Escalation via System Configuration Image Upload Processor

[
  {
    "vendor": "ServiceNow",
    "product": "ServiceNow AI Platform",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Xanadu Patch 11 Hot Fix 7a",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Yokohama Patch 12 Hot Fix 3b",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Yokohama Patch 13 Hot Fix 4",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Zurich Patch 7b Hot Fix 3",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Zurich Patch 8 Hot Fix 5",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Zurich Patch 9 Hot Fix 6",
        "versionType": "customZurich Patch 10 Hot Fix 2m (m-branch)"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Zurich Patch 10 Hot Fix 2m (m-branch)",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Zurich Patch 10 Hot Fix 3 (standard)",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Zurich Patch 11",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Zurich Patch 12",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Australia Patch 2 Hot Fix 3",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Australia Patch 3 Hot Fix 2",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Australia Patch 3m",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "Australia Patch 4",
        "versionType": "custom"
      },
      {
        "status": "unknown",
        "version": "0",
        "lessThan": "Australia Patch 5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]