vercel-april2026-incident-response

Vercel 2026년 4월 보안 사고 대응 가이드 최종 업데이트: 2026년 4월 20일 오후 12:07 AEST/브리즈번 - v2 — Vercel CEO 4월 20일 업데이트 반영 중요: 이 문서는 법적 또는 공식적인 조언이 아닙니다. 침해를 당했다고 생각되면 사고 대응 파트너에게 연락하시기 바랍니다. 이 정보는 OpenSourceMalware 팀이 선의로 제공하는 것입니다. 사고 대응 회사에 대한 소개가 필요하시면 저희가 함께 일해본 몇 곳을 추천해 드릴 수 있습니다. 무슨 일이 일어났나? Vercel은 2026년 4월...

CVE-2026-6875-PoC-Exploit

CVE-2026-6875 - ServiceNow 事前認証RCEエクスプロイトフレームワーク & PoC検証ツール 🔥 ServiceNow AI プラットフォーム — JavaScriptインジェクション → サンドボックスエスケープ → RCE → root権限昇格 エクスプロイトフレームワーク & セーフ検証ツール 許可されたセキュリティテストのみを対象としています。 ⚖️ 法的免責事項と責任ある使用 このツールは、教育目的および許可されたペネトレーションテスト専用に提供されています。...

aisecplus-week01-servicenow-ai-security-incident

AISec Plus Week01 - 위협 파악 AI 보안 사고 연구: ServiceNow Virtual Agent 취약점 CVE-2025-12420 무슨 일이 일어났나? ServiceNow AI 플랫폼에서 인증되지 않은 공격자가 합법적인 사용자를 가장하여 해당 사용자의 권한으로 작업을 실행할 수 있게 하는 심각한 취약점이 발견되었습니다. Virtual Agent 인증 프로세스의 약점으로 인해 공격자는 다음을 수행할 수 있었습니다: 인증 제어 우회 권한 있는 사용자 가장 관리자 작업 실행 새 계정 생성 플랫폼 리소스 수정 사고 ...

CVE-2026-74820

ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or...

CVE-2026-74820

CVE-2026-74820 is a CRITICAL (CVSS 4.0: 10.0) SQL injection vulnerability in the ServiceNow AI platform , specifically through a Dynamic Schema ORDER BY clause . An unauthenticated user can, under certain circumstances, execute arbitrary SQL statements against the instance's underlying database, ...

CVE-2026-74820 Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause

ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or...

EUVD-2026-67221

ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or...

EUVD-2026-67220

ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ...

CVE-2026-18886 Unauthenticated Privilege Escalation via System Configuration Image Upload Processor

ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ...

CVE-2026-18885

CVE-2026-18885 is a code injection vulnerability in the ServiceNow AI platform , specifically in its GraphQL Composite Data API , enabling an unauthenticated attacker to execute arbitrary code and access or modify instance data. The CVSS 4.0 base score is 10.0 (Critical) with all impact dimension...

CVE-2026-18885 Unauthenticated Remote Code Execution in GraphQL Composite Data API

ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond...

PT-2026-82730

Name of the Vulnerable Software and Affected Versions ServiceNow AI platform affected versions not specified Description An unauthenticated user can execute arbitrary SQL statements against the underlying database of the ServiceNow AI platform. This occurs via a SQL injection in the dynamic schem...

PT-2026-82653

Name of the Vulnerable Software and Affected Versions ServiceNow AI platform affected versions not specified Description An improper access control issue exists within the ServiceNow AI platform. This flaw allows an unauthenticated user to create or modify instance data beyond intended permission...

CVE-2026-66778

CVE-2026-66778 affects SAP Approuter within SAP Business AI Platform. The vulnerability stems from insufficient sanitization of certain request headers forwarded to internal components, enabling an unauthenticated attacker to obtain limited unauthorized access to information (confidentiality impa...

CVE-2026-66760

Technical details about CVE-2026-66760 are not publicly available in the provided documents beyond what is described in the Initial Description; monitor for updates.

CVE-2026-58237

CVE-2026-58237 concerns multiple vulnerabilities in SAP Business AI Platform (Approuter). The WebSocket component allegedly fails to perform sufficient authorization checks in certain functionality, allowing a low-privileged attacker to access restricted functionality and potentially read sensiti...

Important: Red Hat Security Advisory: RHEL AI 3.6 RPM runtime CVE fix - thrift

AIPCC Security Alerts identified CVEs in the 3.X release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

Important: Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - aom

AIPCC Security Alerts identified CVEs in the 3.4 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

CVE-2026-70492 Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Markdown/KatexRenderer.svelte could store and render a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. Th...

RHEL 9 : RHEL AI 3.5 RPM runtime CVE fix - thrift (Important) (RHSA-2026:49715)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:49715 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...