aisecplus-week01-servicenow-ai-security-incident

AISec Plus Week01 - 위협 파악 AI 보안 사고 연구: ServiceNow Virtual Agent 취약점 CVE-2025-12420 무슨 일이 일어났나? ServiceNow AI 플랫폼에서 인증되지 않은 공격자가 합법적인 사용자를 가장하여 해당 사용자의 권한으로 작업을 실행할 수 있게 하는 심각한 취약점이 발견되었습니다. Virtual Agent 인증 프로세스의 약점으로 인해 공격자는 다음을 수행할 수 있었습니다: 인증 제어 우회 권한 있는 사용자 가장 관리자 작업 실행 새 계정 생성 플랫폼 리소스 수정 사고 ...

CVE-2026-6875-PoC-Exploit

CVE-2026-6875 - ServiceNow 사전 인증 RCE 익스플로잇 프레임워크 및 PoC 확인기 🔥 ServiceNow AI Platform — JavaScript 인젝션 → 샌드박스 탈출 → RCE → Root 권한 상승 익스플로잇 프레임워크 및 안전 확인기 인가된 보안 테스트 전용입니다. ⚖️ 법적 고지 및 책임 있는 사용 이 도구는 교육 및 인가된 침투 테스트 목적으로만 제공됩니다. 저자와 기여자는 이 소프트웨어의 오용이나 손해에 대해 책임을 지지 않습니다. 사용자는 테스트 대상 소유자의 명시적 서면 허가를 받았는...

CVE-2026-86859

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access,...

CVE-2026-86857

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an authenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access,...

CVE-2026-86858

ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue could enable an unauthenticated user, in certain circumstances, to create, modify, or delete instance data beyond what was intended. In August 2026, ServiceNo...

CVE-2026-86860

ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting in privilege escalation. ServiceNow...

CVE-2026-13016

ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or modif...

CVE-2026-86860 Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform

ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting in privilege escalation. ServiceNow...

CVE-2026-86860 Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform

ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting in privilege escalation. ServiceNow...

CVE-2026-86860

The ServiceNow AI Platform contains a missing authorization vulnerability that could allow an unauthenticated user to extract instance data beyond intended limits, potentially leading to privilege escalation . ServiceNow has released security updates for hosted instances and provided updates for ...

EUVD-2026-86403

ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting in privilege escalation. ServiceNow...

EUVD-2026-86400

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access,...

CVE-2026-86859

The ServiceNow AI Platform is affected by an authorization bypass security issue. If exploited, an unauthenticated user could gain access to data within the platform that they are not entitled to see, potentially leading to further unintended access. ServiceNow has already deployed a security upd...

CVE-2026-86859 Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access,...

CVE-2026-86859 Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access,...

CVE-2026-13016 Unauthenticated SQL Injection in ServiceNow AI Platform

ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or modif...

CVE-2026-13016 Unauthenticated SQL Injection in ServiceNow AI Platform

ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or modif...

EUVD-2026-86399

ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or modif...

CVE-2026-13016

The ServiceNow AI Platform contains a SQL injection vulnerability that could allow an unauthenticated user to execute arbitrary SQL statements against the instance's underlying database. Successful exploitation could result in unauthorized access to, or modification of, instance data. ServiceNow ...

CVE-2026-86858 Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform

ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue could enable an unauthenticated user, in certain circumstances, to create, modify, or delete instance data beyond what was intended. In August 2026, ServiceNo...