{"metadata": {"vulnerability": "CVE-2026-13016", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2026-06-23T16:22:41.869Z", "date_only": false, "value": "2026-06-23T16:22:41.869Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-13016", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-24T18:48:50.070Z", "date_only": false, "value": "2026-09-24T18:48:50.070Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-13016", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-24T18:48:50.070Z", "date_only": false, "value": "2026-09-24T18:48:50.070Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / SN", "record": "CVE-2026-13016", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T19:13:52.621Z", "date_only": false, "value": "2026-09-24T19:13:52.621840Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-13016", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-24T19:13:52.621Z", "date_only": false, "value": "2026-09-24T19:13:52.621840Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-13016", "record": "FKIE_CVE-2026-13016", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-09-24T19:17:11Z", "date_only": false, "value": "2026-09-24T19:17:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-89WX-H2M8-FC58", "record": "GHSA-89WX-H2M8-FC58", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-09-24T19:17:11.820Z", "date_only": false, "value": "2026-09-24T19:17:11.820", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-13016", "record": "FKIE_CVE-2026-13016", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-24T19:40:04.534Z", "date_only": false, "value": "2026-09-24T19:40:04.534719Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbz44h2ir2f", "record": "CVE-2026-13016", "field": "creation_timestamp", "uuid": "de680300-4908-4f61-9cee-b69291834e25", "content": "CVE-2026-13016 - servicenow ai platform\nThe AI platform in ServiceNow could let anyone without a login run commands that change or view the database. This could expose or alter business data that should be\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#servicenow #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbz44h2ir2f"}, {"timestamp": "2026-09-24T20:08:18.547Z", "date_only": false, "value": "2026-09-24T20:08:18.547811Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwc2om227r26", "record": "CVE-2026-13016", "field": "creation_timestamp", "uuid": "f373c4ea-ae4e-491d-8fad-41ce97ed3abf", "content": "\ud83d\udea8 CVE-2026-13016 \u2014 CVSS 9.3 CRITICAL\n\nServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-13016\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwc2om227r26"}, {"timestamp": "2026-09-24T21:00:46.893Z", "date_only": false, "value": "2026-09-24T21:00:46.893", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-13016", "record": "FKIE_CVE-2026-13016", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-24T21:32:48Z", "date_only": false, "value": "2026-09-24T21:32:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-89WX-H2M8-FC58", "record": "GHSA-89WX-H2M8-FC58", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-24T21:32:48Z", "date_only": false, "value": "2026-09-24T21:32:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-89WX-H2M8-FC58", "record": "GHSA-89WX-H2M8-FC58", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-24T21:41:53.584Z", "date_only": false, "value": "2026-09-24T21:41:53.584998Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/117328190622884676", "record": "CVE-2026-13016", "field": "creation_timestamp", "uuid": "2221b96c-7ce0-42a2-9603-f4a1e0d797ba", "content": "Hack and patch more ServiceNow shit.\nhttps://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623\n\nOn September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.ServiceNow did not identify evidence of malicious exploitation related to these issues.", "url": "https://infosec.exchange/users/cR0w/statuses/117328190622884676"}, {"timestamp": "2026-09-25T02:40:33Z", "date_only": false, "value": "2026-09-25T02:40:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-servicenow", "record": "CVE-2026-13016", "field": "creation_timestamp", "uuid": "6d206999-0eac-49da-b9be-ac58f08f4233", "url": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-servicenow"}, {"timestamp": "2026-09-25T12:30:40.103Z", "date_only": false, "value": "2026-09-25T12:30:40.103Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-13016", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-25T12:30:40.103Z", "date_only": false, "value": "2026-09-25T12:30:40.103Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-13016", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-27T23:07:05.822Z", "date_only": false, "value": "2026-09-27T23:07:05.822688Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mwjw2y3ugs26", "record": "CVE-2026-13016", "field": "creation_timestamp", "uuid": "e41322f4-bab5-46b2-9e38-0c7fab0b4982", "content": "ServiceNow AI Platform\u306b5\u4ef6\u306e\u8106\u5f31\u6027-CVE-2026-13016,CVE-2026-86860 \u4ed6 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mwjw2y3ugs26"}, {"timestamp": "2026-10-25T00:58:58.313Z", "date_only": false, "value": "2026-10-25T00:58:58.313176Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mynyvwrbsk2j", "record": "CVE-2026-13016", "field": "creation_timestamp", "uuid": "5cdbf72b-0145-4a09-a815-3b68e3506b35", "content": "\u300cServiceNow AI Platform\u300d\u306bSQLi\u306a\u3069\u8907\u6570\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u63d0\u4f9b\n\n\u300cServiceNow AI Platform\u300d\u306b5\u4ef6\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u3082\u8907\u6570\u542b\u307e\u308c\u3066\u304a\u308a\u3001ServiceNow\u3067\u306f\u5229\u7528\u8005\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f2026\u5e749\u670824\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001CVE\u30d9\u30fc\u30b9\u30675\u4ef6\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u5185\u90e8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c6\u30b9\u30c8\u3084\u5354\u8abf\u7684\u306a\u5831\u544a\u3001\u30d0\u30b0\u5831\u5968\u91d1\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u901a\u3058\u3066\u7279\u5b9a\u3055\u308c\u305f\u8106\u5f31\u6027\u3068\u3057\u3066\u3044\u308b\u3002\n\n\u300cCVE-2026-13016\u300d\u306f\u3001\u7279\u5b9a\u306e\u74b0\u5883\u4e0b\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u306a\u3057\u306b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u60aa\u7528\u3067\u304d\u308bSQL\u30a4\u30f3...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mynyvwrbsk2j"}], "metrics": {"as_of": "2026-11-15T21:52:36.139Z", "anchors": {"origin": {"timestamp": "2026-09-24T18:48:50.070Z", "date_only": false, "value": "2026-09-24T18:48:50.070Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-13016", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-24T18:48:50.070Z", "date_only": false, "value": "2026-09-24T18:48:50.070Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-13016", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 4503826.069443, "hours": 1251.0627970674998, "days": 52.12761654447916, "min_seconds": 4503826.069443, "max_seconds": 4503826.069443, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-24T18:48:50.070Z", "date_only": false, "value": "2026-09-24T18:48:50.070Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-13016", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T21:52:36.139Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}