{"uuid": "dc87f3d0-bd3c-4254-82ad-b4adf1a86942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18885", "type": "seen", "source": "https://t.me/pphm_HackerNews/2917", "content": "\ud83d\udd34 ServiceNow warns of three max severity security vulnerabilities\n\nServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code injection, SQL injection, and privilege escalation attacks.\n\nThe ServiceNow AI Platform (formerly known as the Now Platform) is an enterprise-grade Platform-as-a-Service (PaaS) that helps integrate AI into core enterprise workflows and powers more than 100,000 enterprise AI apps at 85% of all Fortune 500 companies.\n\nIn a Thursday advisory, the company said it patched its cloud-based platform against the three critical security flaws (CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820) and advised customers to secure their self-hosted instances.", "creation_timestamp": "2026-08-29T00:00:07.828043Z"}