{"vulnerability": "CVE-2026-6875", "sightings": [{"uuid": "a328e720-1319-470e-9b3e-cb288931a5a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrtnwp2vke2u", "content": "Daily IT Security Digest \u2014 2026-07-30\nThis zero-day has already been flagged for inclusion in Microsoft's security updates. [Source](https://mastodon.social/@knoppix95/116947688599801947)\n\n## 3. Active Exploitation of ServiceNow RCE Vulnerability (CVE-2026-6875)\n\nHackers are actively exploiting a", "creation_timestamp": "2026-07-30T05:02:08.645476Z"}, {"uuid": "de9867cf-1254-40de-8565-05c5b72565ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrtnwpdmn22o", "content": "Daily IT Security Digest \u2014 2026-07-30\nremote code execution vulnerability in ServiceNow (CVE-2026-6875) to bypass sandbox restrictions and breach corporate networks. Unlike many vulnerabilities that sit unexploited, this one is seeing active, real-world attacks. Organizations using ServiceNow", "creation_timestamp": "2026-07-30T05:02:09.182325Z"}, {"uuid": "cec37a6d-045d-4c9f-aa87-6d31a725b43b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3msaae25l3i2b", "content": "Daily IT Security Digest \u2014 2026-08-04\n# Daily IT Security Digest \u2014 2026-08-04\n\n## Top Cybersecurity News\n\n1. **Actively Exploited: ServiceNow RCE Vulnerability (CVE-2026-6875)**\nHackers are actively exploiting a critical Remote Code Execution vulnerability in ServiceNow to bypass sandbox", "creation_timestamp": "2026-08-04T05:03:40.862158Z"}, {"uuid": "80049fdd-f36d-44fd-aa84-3862eca066ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3msaae2g5on2u", "content": "Daily IT Security Digest \u2014 2026-08-04\nbreach corporate networks. CVE-2026-6875 has already been leveraged in wild attacks, making immediate patching essential for any organization running on-premise or cloud-hosted ServiceNow instances. This vulnerability allows unauthenticated attackers to execute", "creation_timestamp": "2026-08-04T05:03:41.330504Z"}, {"uuid": "4659ad89-02e2-42d8-9f64-070d8b1088c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrw6grpr372q", "content": "Daily IT Security Digest \u2014 2026-07-31\n[EUVD-51381](https://mastodon.social/@EUVD_Bot/117012601567080927)\n\n## 2. ServiceNow RCE (CVE-2026-6875) Actively Exploited in the Wild\nHackers are actively exploiting a critical remote code execution vulnerability in ServiceNow (CVE-2026-6875) to bypass sandbox", "creation_timestamp": "2026-07-31T05:02:47.847919Z"}, {"uuid": "edeb8260-8c29-4b99-b301-7400169d5359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrtfv6f2p", "content": "Daily IT Security Digest \u2014 2026-08-20\nAI/ML infrastructure deployments. (Source: [OFFSEQ Radar](https://radar.offseq.com/threat/cve-2026-76850-internlm-lmdeploy-rce/), [Mastodon](https://infosec.exchange/@offseq/117125246166620239))\n\n## 6. ServiceNow RCE CVE-2026-6875 Exploited to Bypass Sandbox", "creation_timestamp": "2026-08-20T05:03:09.254530Z"}, {"uuid": "551ba021-0c90-43d4-8bba-2ccbf55659de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68750", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msuawb6jbw23", "content": "\ud83d\udccc CVE-2026-68750 - Inefficient Algorithmic Complexity vulnerability in the traversal engine in rrrene html_sanitize_ex allows an unauthenticated remote attacker to exhau... https://www.cyberhub.blog/cves/CVE-2026-68750", "creation_timestamp": "2026-08-12T04:07:07.391008Z"}, {"uuid": "34eab7b2-f935-4df6-b860-088289bb7511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mscqs5ixai2g", "content": "Daily IT Security Digest \u2014 2026-08-05\n(CVE-2026-6875) to Breach Corporate Networks**\n   Threat actors are actively exploiting a critical remote code execution vulnerability in ServiceNow to bypass sandbox restrictions and gain unauthorized access to corporate networks. CVE-2026-6875 is being", "creation_timestamp": "2026-08-05T05:03:13.442235Z"}, {"uuid": "5e82afe2-653d-4d43-99d5-2eeeacb35536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mskc56h72w26", "content": "Daily IT Security Digest \u2014 August 8, 2026\n\n\n3. **ServiceNow RCE Vulnerability (CVE-2026-6875) \u2014 Actively Exploited**\n   Hackers are actively exploiting a critical remote code execution flaw in ServiceNow to bypass sandbox restrictions and", "creation_timestamp": "2026-08-08T05:04:27.358050Z"}, {"uuid": "76e771a6-101c-4fa8-a3f1-f41c3fec56db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/pphm_HackerNews/2177", "content": "\ud83d\udd34 Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875\n\nAttackers are exploiting critical ServiceNow flaw CVE-2026-6875, allowing unauthenticated remote code execution on self-hosted instances.\n\nSearchlight Cyber researchers disclosed a critical pre-authentication remote code execution vulnerability, tracked as CVE-2026-6875, in the ServiceNow AI Platform on July 14. The same day, ServiceNow released patches for self-hosted instances. Since July 17, attackers have started exploiting it in the wild.\n\n\u201cAfter finding our first pre-auth critical bug almost two years ago and having a much better understanding of the ServiceNow architecture, we decided to return and focus our efforts on a different corner of the codebase.\u201d reads the report published by Searchlight Cyber. \u201cOur efforts led to us finding a completely unauthenticated RCE, which allowed full compromise of the ServiceNow instance as well as all connected proxy servers.\u201d", "creation_timestamp": "2026-08-21T23:00:08.154678Z"}, {"uuid": "0dd084b3-b35a-4dc2-a20d-62dc6ed201c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/pphm_HackerNews/2157", "content": "\ud83d\udd34 Critical ServiceNow code execution flaw now exploited in attacks\n\nAttackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused.\n\nFormerly known as the Now Platform, ServiceNow AI Platform is an enterprise-grade Platform-as-a-Service (PaaS) that helps businesses integrate AI into core enterprise workflows.", "creation_timestamp": "2026-08-21T23:00:08.300130Z"}, {"uuid": "38459db3-abce-48b8-8b0f-d9c0ac42e21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-21T23:00:09.216482Z"}, {"uuid": "21a2aea5-7346-4484-a735-0ee4300e7f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3msfb7cvjqn2r", "content": "Daily IT Security Digest \u2014 2026-08-06\n# Daily IT Security Digest \u2014 2026-08-06\n\n## 1. Critical ServiceNow RCE Vulnerability (CVE-2026-6875) Actively Exploited in the Wild\nHackers are actively exploiting a critical remote code execution vulnerability in ServiceNow (CVE-2026-6875) to bypass sandbox", "creation_timestamp": "2026-08-06T05:02:14.909806Z"}, {"uuid": "8e2a1e0e-5834-4da4-b4c3-43ddf3ddcf05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mswvfi2wxb2j", "content": "Daily IT Security Digest\nAttack,\" highlighting sophisticated social engineering combined with zero-day exploits.\nSource: @AAKL infosec.exchange, Check Point Research\n6. \ud83d\udfe0 Active ServiceNow RCE Exploitation CVE-2026-6875", "creation_timestamp": "2026-08-13T05:18:52.101234Z"}, {"uuid": "5b88ee34-e94a-4bba-9e74-c0b532f3981b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mswvfidpd52m", "content": "Daily IT Security Digest\nHackers are actively exploiting a critical ServiceNow remote code execution vulnerability CVE-2026-6875 to bypass sandbox restrictions and breach corporate networks, compromising organizational security boundaries at scale.\nSource: @securityonline Bluesky\n7. \ud83d\udc80 Multiple", "creation_timestamp": "2026-08-13T05:18:52.606891Z"}, {"uuid": "94a4f8b0-9fd0-4ac4-b376-6f4e791837c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtfiy23nbc2h", "content": "ServiceNow\u306e\u91cd\u5927\u306a\u30b3\u30fc\u30c9\u5b9f\u884c\u8106\u5f31\u6027\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u308b\n\n\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u4f01\u696dDefused\u306b\u3088\u308b\u3068\u3001\u653b\u6483\u8005\u306fServiceNow AI\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-6875\uff09\u3092\u60aa\u7528\u3057\u59cb\u3081\u3066\u3044\u308b\u3002\n\n\u4ee5\u524d\u306fNow Platform\u3068\u3057\u3066\u77e5\u3089\u308c\u3066\u3044\u305fServiceNow AI Platform\u306f\u3001\u4f01\u696d\u304cAI\u3092\u30b3\u30a2\u3068\u306a\u308b\u696d\u52d9\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u306b\u7d71\u5408\u3059\u308b\u306e\u306b\u5f79\u7acb\u3064\u3001\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u30b0\u30ec\u30fc\u30c9\u306ePlatform-as-a-Service\uff08PaaS\uff09\u3067\u3059\u3002\n\n\u3053\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u767a\u898b\u3057\u30014\u67081\u65e5\u306b\u5831\u544a\u3057\u305f\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dSearchlight Cyber\u200b\u200b\u306b\u3088\u308b\u3068\u3001...", "creation_timestamp": "2026-08-19T00:46:38.040991Z"}, {"uuid": "d9950df4-cd78-47ae-bb4e-191782d0d2ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/pphm_HackerNews/2177", "content": "\ud83d\udd34 Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875\n\nAttackers are exploiting critical ServiceNow flaw CVE-2026-6875, allowing unauthenticated remote code execution on self-hosted instances.\n\nSearchlight Cyber researchers disclosed a critical pre-authentication remote code execution vulnerability, tracked as CVE-2026-6875, in the ServiceNow AI Platform on July 14. The same day, ServiceNow released patches for self-hosted instances. Since July 17, attackers have started exploiting it in the wild.\n\n\u201cAfter finding our first pre-auth critical bug almost two years ago and having a much better understanding of the ServiceNow architecture, we decided to return and focus our efforts on a different corner of the codebase.\u201d reads the report published by Searchlight Cyber. \u201cOur efforts led to us finding a completely unauthenticated RCE, which allowed full compromise of the ServiceNow instance as well as all connected proxy servers.\u201d", "creation_timestamp": "2026-08-22T00:00:11.748457Z"}, {"uuid": "a69f227e-b0c8-427e-ac55-09d24d9eaaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/pphm_HackerNews/2157", "content": "\ud83d\udd34 Critical ServiceNow code execution flaw now exploited in attacks\n\nAttackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused.\n\nFormerly known as the Now Platform, ServiceNow AI Platform is an enterprise-grade Platform-as-a-Service (PaaS) that helps businesses integrate AI into core enterprise workflows.", "creation_timestamp": "2026-08-22T00:00:11.885632Z"}, {"uuid": "8401e808-0e4f-4e8a-8268-b651f555f821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-22T00:00:12.716342Z"}, {"uuid": "29e03bcd-cde0-4911-bedc-60a1dc54541d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3msrtm6d5bd2o", "content": "Daily IT Security Digest\nwithout authentication. No official CVE or patch version has been released yet. Organizations using Metabase should restrict access and monitor for `/api/session/reset_password` path abuse.\n\n---\n\n## 2. \ud83d\udd34 CRITICAL: ServiceNow RCE (CVE-2026-6875) Actively", "creation_timestamp": "2026-08-11T05:03:30.320332Z"}, {"uuid": "2a7c6162-3152-4fc3-b06e-cc87d2c38bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxpkayj3223", "content": "\u300cServiceNow AI Platform\u300d\u306bRCE\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u63d0\u4f9b\n\nServiceNow\u306f\u3001\u540c\u793e\u30b5\u30fc\u30d3\u30b9\u300cServiceNow AI Platform\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u3066\u5bfe\u51e6\u3057\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670813\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u8106\u5f31\u6027\u300cCVE-2026-6875\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u7279\u5b9a\u306e\u6761\u4ef6\u4e0b\u306b\u304a\u3044\u3066\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u3068\u3001\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u3092\u56de\u907f\u3057\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u3068\u3044\u3046\u3002\n\n\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv4.0\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u306f\u300c9.5\u300d\u3001\u91cd\u8981\u5ea6\u306f4\u6bb5\u968e\u4e2d\u3082\u3063\u3068...", "creation_timestamp": "2026-08-13T13:06:49.264265Z"}, {"uuid": "f19f16c6-c2e4-4787-bf01-a7343b865bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/34795", "content": "\ud83d\udd25 CVE-2026-6875 - ServiceNow Pre-Auth RCE Framework & Verification Tool\nA research-focused repository for analyzing CVE-2026-6875, a critical pre-auth Remote Code Execution (RCE) vulnerability affecting self-hosted ServiceNow AI Platform deployments. The project includes both a non-intrusive verification tool and a research framework for vulnerability analysis.\n\n\ud83d\udccc GitHub  \n\ud83d\udc49 https://github.com/tc4dy/CVE-2026-6875-PoC-Exploit\n\n\u2728 Features\n\u2022 Safe verification mode for authorized security assessments\n\u2022 ServiceNow instance and version detection\n\u2022 JavaScript injection validation\n\u2022 Sandbox escape verification\n\u2022 JSON reporting for assessment results\n\u2022 Confidence scoring based on collected evidence\n\u2022 Batch scanning support for multiple targets\n\u2022 Research documentation covering vulnerability workflow\n\n\ud83d\udcbb Platform / Technologies\n\u2022 Python\n\u2022 ServiceNow AI Platform\n\u2022 JavaScript\n\u2022 JSON\n\n\ud83c\udfaf Ideal For\n\u2022 Security Researchers\n\u2022 Penetration Testers\n\u2022 Blue Team Analysts\n\u2022 Incident Responders\n\u2022 Vulnerability Assessment Teams\n\u2022 Red Team (Authorized Environments)\n\u2022 SOC Analysts\n\n\u26a0\ufe0f Research & Defensive Use Only\nThis repository discusses a high-severity vulnerability that has been publicly documented. Any testing should be performed only on systems you own or are explicitly authorized to assess. The included verification functionality is intended to support defensive validation, security research, and patch verification.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T17:00:04.541725Z"}, {"uuid": "717f2b6c-9ff3-4c1f-ab90-8ffff742fda5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtdh3rxiha2f", "content": "Daily IT Security Digest \u2014 2026-08-18\ntructure.\nSources: [@DevaOnBreaches](https://infosec.exchange/@DevaOnBreaches/117113801154295780)\n\n### 4. Active Exploitation of Critical ServiceNow RCE Vulnerability (CVE-2026-6875)\nHackers are actively exploiting CVE-2026-6875, a critical remote code", "creation_timestamp": "2026-08-18T05:07:30.684749Z"}, {"uuid": "14457ca3-192d-41b9-89cf-8dd540e01682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtg6sybvnc2r", "content": "\u653b\u6483\u8005\u304cServiceNow\u306e\u91cd\u5927\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u8106\u5f31\u6027\uff08CVE-2026-6875\uff09\u3092\u60aa\u7528\n\nSearchlight Cyber\u200b\u200b\u306e\u7814\u7a76\u8005\u3089\u306f7\u670814\u65e5\u3001ServiceNow AI Platform\u306b\u91cd\u5927\u306a\u8a8d\u8a3c\u524d\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\uff08CVE-2026-6875\uff09\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002ServiceNow\u306f\u540c\u65e5\u3001\u30bb\u30eb\u30d5\u30db\u30b9\u30c8\u578b\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u5411\u3051\u306e\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u30027\u670817\u65e5\u4ee5\u964d\u3001\u653b\u6483\u8005\u306f\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u59cb\u3081\u3066\u3044\u308b\u3002\n\n\u300c\u7d042\u5e74\u524d\u306b\u6700\u521d\u306e\u8a8d\u8a3c\u524d\u91cd\u5927\u306a\u30d0\u30b0\u3092\u767a\u898b\u3057\u3001ServiceNow\u306e\u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3\u3092\u3088\u308a\u6df1\u304f\u7406\u89e3\u3057\u305f\u4e0a\u3067\u3001\u79c1\u305f\u3061\u306f\u518d\u3073\u8abf\u67fb\u306b\u623b\u308a\u3001\u30b3\u30fc\u30c9\u30d9\u30fc\u30b9\u306e\u5225\u306e\u9818...", "creation_timestamp": "2026-08-19T07:17:29.307814Z"}, {"uuid": "81d297d4-b8c9-47f6-ad0e-a0c472e25b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtg6uojkns2r", "content": "ServiceNow\u306e\u91cd\u5927\u306a\u30b3\u30fc\u30c9\u5b9f\u884c\u8106\u5f31\u6027\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u308b\n\n\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u4f01\u696dDefused\u306b\u3088\u308b\u3068\u3001\u653b\u6483\u8005\u306fServiceNow AI\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-6875\uff09\u3092\u60aa\u7528\u3057\u59cb\u3081\u3066\u3044\u308b\u3002\n\n\u4ee5\u524d\u306fNow Platform\u3068\u3057\u3066\u77e5\u3089\u308c\u3066\u3044\u305fServiceNow AI Platform\u306f\u3001\u4f01\u696d\u304cAI\u3092\u30b3\u30a2\u3068\u306a\u308b\u696d\u52d9\u30d5\u30ed\u30fc\u306b\u7d71\u5408\u3059\u308b\u306e\u306b\u5f79\u7acb\u3064\u3001\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u30b0\u30ec\u30fc\u30c9\u306ePlatform-as-a-Service\uff08PaaS\uff09\u3067\u3059\u3002\n\n\u3053\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u767a\u898b\u3057\u30014\u67081\u65e5\u306b\u5831\u544a\u3057\u305f\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dSearchlight Cyber\u200b\u200b\u306b\u3088\u308b\u3068\u3001\u3053\u306e\u8106...", "creation_timestamp": "2026-08-19T07:18:32.483062Z"}, {"uuid": "9b56e8df-5d5b-4026-9f20-4f14168167df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/34795", "content": "\ud83d\udd25 CVE-2026-6875 - ServiceNow Pre-Auth RCE Framework & Verification Tool\nA research-focused repository for analyzing CVE-2026-6875, a critical pre-auth Remote Code Execution (RCE) vulnerability affecting self-hosted ServiceNow AI Platform deployments. The project includes both a non-intrusive verification tool and a research framework for vulnerability analysis.\n\n\ud83d\udccc GitHub  \n\ud83d\udc49 https://github.com/tc4dy/CVE-2026-6875-PoC-Exploit\n\n\u2728 Features\n\u2022 Safe verification mode for authorized security assessments\n\u2022 ServiceNow instance and version detection\n\u2022 JavaScript injection validation\n\u2022 Sandbox escape verification\n\u2022 JSON reporting for assessment results\n\u2022 Confidence scoring based on collected evidence\n\u2022 Batch scanning support for multiple targets\n\u2022 Research documentation covering vulnerability workflow\n\n\ud83d\udcbb Platform / Technologies\n\u2022 Python\n\u2022 ServiceNow AI Platform\n\u2022 JavaScript\n\u2022 JSON\n\n\ud83c\udfaf Ideal For\n\u2022 Security Researchers\n\u2022 Penetration Testers\n\u2022 Blue Team Analysts\n\u2022 Incident Responders\n\u2022 Vulnerability Assessment Teams\n\u2022 Red Team (Authorized Environments)\n\u2022 SOC Analysts\n\n\u26a0\ufe0f Research & Defensive Use Only\nThis repository discusses a high-severity vulnerability that has been publicly documented. Any testing should be performed only on systems you own or are explicitly authorized to assess. The included verification functionality is intended to support defensive validation, security research, and patch verification.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:21.240597Z"}, {"uuid": "0adcc5aa-60be-4295-9bf5-33f37b479bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mshrpweiqv27", "content": "Daily IT Security Digest \u2014 2026-08-07\n- Source: https://infosec.exchange/@offseq/116758965574886024\n## 8. Active Exploitation of ServiceNow RCE Vulnerability (CVE-2026-6875)", "creation_timestamp": "2026-08-07T05:03:11.416272Z"}, {"uuid": "707ca6ef-1dee-4053-8601-f5feaca6823a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mti7up7xcp2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-59310: 36 interactions\nCVE-2026-65400: 28 interactions\nCVE-2026-68820: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-65400: 11 interactions\nCVE-2026-33824: 5 interactions\nCVE-2026-6875: 5 interactions\n", "creation_timestamp": "2026-08-20T02:41:35.985088Z"}, {"uuid": "7fbda7ad-cff3-4b52-b038-bf61b63116c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqke4twobm25", "content": "CVE-2026-6875 - Sandbox Escape in ServiceNow AI Platform\nCVE ID : CVE-2026-6875\n \n Published : July 13, 2026, 6:17 p.m. | 16\u00a0minutes ago\n \n Description : ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vuln...", "creation_timestamp": "2026-07-13T18:47:28.592179Z"}, {"uuid": "d177724c-fd54-4ce8-9d6f-a4cab8bd94f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqkgwy6vga2p", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-6875](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3137947)\nS...\nhttps://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3137947 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-13T19:37:52.935239Z"}, {"uuid": "4da1539b-1f0c-446c-a364-9ad8e78ef98b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqkhmsrgmi25", "content": "CVE-2026-6875 - servicenow ai platform\nThe ServiceNow AI Platform is vulnerable to unauthorized code execution, which could allow an attacker to take control of the system. ServiceNow has released a security\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#servicenow #CVE #infosec", "creation_timestamp": "2026-07-13T19:50:05.168890Z"}, {"uuid": "74f5d57d-1b36-4e1e-b111-13f71beef7be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mql3upwob627", "content": "CVE-2026-6875 (CVSS 9.5) is a ServiceNow sandbox escape in the AI Platform that allows unauthenticated remote code execution. Patch now.\n\n#ServiceNow #CVE20266875 #RemoteCodeExecution #SandboxEscape #CyberSecurity", "creation_timestamp": "2026-07-14T01:52:26.005716Z"}, {"uuid": "25f2647d-de5f-4ab3-8b1d-4d5dc3ded0e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mqlseahne22a", "content": "ServiceNow's AI Platform faces CVE-2026-6875, enabling unauthenticated code execution. Immediate patching is crucial. #ServiceNow #CVE20266875 #CyberSecurity #RCE #Vulnerability #PatchNow thedailytechfeed.com/critical-ser...", "creation_timestamp": "2026-07-14T08:34:49.053159Z"}, {"uuid": "a9a95065-1456-4077-bbfb-9feb75ef5cb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/116918849655114550", "content": "I fucking hate delayed advisories like this. Do better, ServiceNow.\nhttps://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3137947\n\nServiceNow has addressed a critical remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability, tracked as CVE-2026-6875, could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow platform. \nhttps://www.cve.org/CVERecord?id=CVE-2026-6875\nsev:CRIT 9.5 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "creation_timestamp": "2026-07-14T14:41:05.234168Z"}, {"uuid": "ac0102dd-f2c3-4b47-8f0b-3d61c074b8ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mqmlit7kfu2q", "content": "~Cybergcca~\nCanadian Cyber Centre published 6 advisories covering critical vulnerabilities in ServiceNow, Veeam, Mozilla, SAP, Siemens, and HPE.\n-\nIOCs: CVE-2026-6875\n-\n#PatchTuesday #ThreatIntel #Vulnerability", "creation_timestamp": "2026-07-14T16:04:46.252380Z"}, {"uuid": "1be53fab-6ac0-4654-a531-86e0f5a2e1b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/servicenow-security-advisory-av26-693", "content": "", "creation_timestamp": "2026-07-14T16:15:18.984943Z"}, {"uuid": "cbadf9dd-2ebb-4216-b326-4e2faf4ee55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116919330785017978", "content": "ServiceNow security advisory AV26-693 addresses a critical sandbox escape vulnerability affecting multiple versions of their AI platform products. Users and administrators are urged to apply the necessary security updates to mitigate risks identified in CVE-2026-6875.https://www.cyber.gc.ca/en/alerts-advisories/servicenow-security-advisory-av26-693", "creation_timestamp": "2026-07-14T16:43:26.198536Z"}, {"uuid": "72fe8bb8-4ed6-4075-a409-afd14279e05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mqmqdxcyw52p", "content": "In today's episode of rushed technology, ServiceNow has disclosed a critical sandbox escape vulnerability, CVE-2026-6875, lurking inside its AI Platform. This delightful flaw allows unauthenticated remote code execution, meaning absolute strangers can execute arbitrary commands o...\n\nRead full story", "creation_timestamp": "2026-07-14T17:31:31.296736Z"}, {"uuid": "13010b1c-6926-46db-b03c-b13d534c406a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://threatintel.cc/2026/07/14/servicenow-security-advisory-av-canadian.html", "content": "ServiceNow security advisory (AV26-693) - Canadian Centre for Cyber Security\n\nServiceNow security advisory AV26-693 addresses a critical sandbox escape vulnerability affecting multiple versions of their AI platform products. Users and administrators are urged to apply the necessary security updates to mitigate risks identified in CVE-2026-6875.", "creation_timestamp": "2026-07-14T19:00:52.301863Z"}, {"uuid": "7e0a15ab-59c9-46ed-9e58-ccfc728627c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://threatintel.cc/2026/07/14/servicenow-security-advisory-av-canadian.html", "content": "ServiceNow security advisory (AV26-693) - Canadian Centre for Cyber Security\n\nServiceNow security advisory AV26-693 addresses a critical sandbox escape vulnerability affecting multiple versions of their AI platform products. Users and administrators are urged to apply the necessary security updates to mitigate risks identified in CVE-2026-6875.", "creation_timestamp": "2026-07-15T01:00:46.304144Z"}, {"uuid": "fbebecb8-5c7c-4bf0-86e8-2f1a3f876d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqonnys6rs2t", "content": "CVE-2026-6875: Did ServiceNow's Critical RCE Patch Miss Critical Context? #CVE20266875 #ServiceNow #CyberSecurity", "creation_timestamp": "2026-07-15T11:48:46.899871Z"}, {"uuid": "57f0b0a6-5d3d-4bfc-a32b-9fef77c4ec7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116923880381527171", "content": "CRITICAL RCE in ServiceNow AI platform (CVE-2026-6875) allows unauthenticated code execution. Patched \u2014 no active exploitation. Ivanti & Fortinet also released key updates. Patch all affected systems promptly. https://radar.offseq.com/threat/vulnerabilities-patched-by-fortinet-ivanti-service-e42e461913c3f486 #OffSeq #Vuln #ServiceNow #Ivanti #Fortinet", "creation_timestamp": "2026-07-15T12:00:27.896189Z"}, {"uuid": "b72120ae-a1c2-4b04-8486-2e0d84f7f725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqoocwtofd25", "content": "ServiceNow AI platform CRITICAL RCE (CVE-2026-6875) patched \u2014 unauthenticated remote code execution risk. Ivanti & Fortinet also released fixes. Patch all affected products now. \ud83d\udee1\ufe0f https://radar.offseq.com/threat/vulnerabilities-patched-by-fortinet-ivanti-service-e42e461913c3f486 #OffSeq #Vulnera...", "creation_timestamp": "2026-07-15T12:00:29.606229Z"}, {"uuid": "cb3fa9ea-d79e-4686-a265-1f4f8a0dccc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6875", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mqpdkbq2vt2s", "content": "ServiceNow Patches Critical AI Platform RCE (CVE-2026-6875), Says No Active Exploitation\u00a0Observed\n\nServiceNow has patched CVE-2026-6875, a critical AI platform sandbox\u2026\n\nhttps://thecybersecguru.com/news/servicenow-patches-critical-ai-platform-rce-cve-2026-6875-says-no-active-exploitation-observed/", "creation_timestamp": "2026-07-15T18:20:24.739105Z"}, {"uuid": "8ed3e7ac-7e5d-4e44-bd95-8f9011b86497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mqq5etwjul2x", "content": "\ud83d\udd12 ServiceNow patches critical AI Platform sandbox escape (CVE-2026-6875)\n\nAnother important security update for the ServiceNow ecosystem. Just days after the recent API-related vuln...\n\nhttps://tinyurl.com/22r9qdzc #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-07-16T02:02:39.207697Z"}, {"uuid": "64151e42-36b9-4f55-8a40-57d9a2d1fe35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/459", "content": "CVE-2026-6875", "creation_timestamp": "2026-08-28T00:00:37.794388Z"}, {"uuid": "cb92eefd-e89d-44fb-ba52-415fda38013e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqw4jkhiyq2v", "content": "Active Exploitation and Public PoC Disclosed for CVE-2026-6875 ServiceNow Sandbox Escape Remote Code Execution", "creation_timestamp": "2026-07-18T11:03:22.132071Z"}, {"uuid": "b519080a-24da-47a2-b42c-b4e43edd223e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85d8f5a6-1f65-43ae-99b9-83a6f1dc4d62", "content": "", "creation_timestamp": "2026-07-20T09:00:32.252800Z"}, {"uuid": "76fbaf27-80f6-4854-acf3-c7f080424f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mr2y7wellm2v", "content": "Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused.", "creation_timestamp": "2026-07-20T09:29:43.174280Z"}, {"uuid": "8cecc1d5-f99d-442e-bd21-584c9f78a856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mr2yf7dems2v", "content": "ServiceNow AI Platform\u306b\u8106\u5f31\u6027\uff08CVE-2026-6875\uff09\u304c\u767a\u898b\u3055\u308c\u3001\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-07-20T09:32:40.114920Z"}, {"uuid": "f235736d-a5d0-4f02-bad6-35bff969e0b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mr2ytqxm5v2t", "content": "ServiceNow\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u8a31\u3059\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u3067\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u308b\n\n\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u4f01\u696d\u306eDefused\u306b\u3088\u308b\u3068\u3001\u653b\u6483\u8005\u306fServiceNow AI Platform\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027(CVE-2026-6875)\u306e\u60aa\u7528\u3092\u3059\u3067\u306b\u958b\u59cb\u3057\u3066\u3044\u308b\u3068\u3044\u3044\u307e\u3059\u3002 ServiceNow AI Platform\u306f\u3001\u4ee5\u524d\u306fNow Platform\u3068\u3044\u3046\u540d\u79f0\u3067\u77e5\u3089\u308c\u3066\u3044\u305f\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u5411\u3051P", "creation_timestamp": "2026-07-20T09:40:47.881804Z"}, {"uuid": "beeab3b2-6186-45c7-9ab2-57058fdef896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mr2yya67ww2r", "content": "\ud83e\udd16 CVE-2026-6875 (CVSS 9.8): Critical pre-auth RCE in ServiceNow AI Platform exploited in the wild. CISA KEV added, patch available.\nhttps://www.bleepingcomputer.com/news/security/critical-servicenow-code-execution-flaw-now-exploited-in-attacks/", "creation_timestamp": "2026-07-20T09:43:17.918336Z"}, {"uuid": "cb52099e-13dd-4a79-a7f8-98e805198d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mr2z7f7vi42w", "content": "ServiceNow patches critical sandbox RCE vulnerability (CVE-2026-6875) after public PoC exploit release. #ServiceNow #CVE20266875 #RCE #CyberSecurity #Vulnerability #PatchManagement thedailytechfeed.com/poc-released...", "creation_timestamp": "2026-07-20T09:47:19.618924Z"}, {"uuid": "b2e6e821-96ee-4ccd-80ef-5c6bb1981515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mr2zyrvpyl2d", "content": "ServiceNow AI Platform \u306e\u91cd\u5927\u8106\u5f31\u6027 CVE-2026-6875 \u304c\u60aa\u7528\u4e2d\n\nServiceNow AI Platform \u306e\u91cd\u5927\u306a code execution \u8106\u5f31\u6027 CVE-2026-6875 \u304c\u65e2\u306b\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u4f01\u696d Defused \u304c\u5831\u544a\u3057\u3066\u304a\u308a\u3001\u540c\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3092\u5229\u7528\u3059\u308b\u7d44\u7e54\u306f\u76f4\u3061\u306a\u30d1\u30c3\u30c1\u9069\u7528\u304c\u6025\u52d9\u3067\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-07-20T10:01:30.724950Z"}, {"uuid": "50c5871b-9ecb-4475-ac3b-dbc66403e224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mr32alfiad2s", "content": "Critical ServiceNow AI Platform Vulnerability CVE-2026-6875 Exploited in the Wild: A New Warning for Enterprise AI Security +\u00a0Video\n\nIntroduction: The AI Infrastructure That Became a New Cyber Battlefield Artificial intelligence has quickly become the foundation of modern enterprise operations.\u2026", "creation_timestamp": "2026-07-20T10:05:52.790505Z"}, {"uuid": "fcfe3f16-9b30-495d-8de9-f0441e837991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mr35dtiv2s2u", "content": "\u26a0\ufe0f CVE-2026-6875 (Critical): pre-auth sandbox-escape RCE in ServiceNow AI Platform lets unauthenticated attackers run code. Patched July 13; reports of in-the-wild exploitation. Update now, prioritise self-hosted. Query: technology=\"ServiceNow\"", "creation_timestamp": "2026-07-20T11:01:27.687177Z"}, {"uuid": "629d57dd-6002-4bf3-b244-476a0830e699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "https://t.me/BleepingComputer/25142", "content": "\u200aCritical ServiceNow code execution flaw now exploited in attacks\n\nAttackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-servicenow-code-execution-flaw-now-exploited-in-attacks/", "creation_timestamp": "2026-07-20T12:00:04.433210Z"}, {"uuid": "912d2294-2535-47f9-b7b9-8ecf1e28292d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mr3anmdg2r2k", "content": "Attackers have begun exploiting CVE-2026-6875, a critical remote code execution flaw in the ServiceNow AI Platform. Threat intelligence indicates active campaigns targeting the vulnerability.", "creation_timestamp": "2026-07-20T12:00:31.508079Z"}, {"uuid": "1b6b52dc-9c2c-4b61-a81b-71006cbbd2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mr3fobtli72n", "content": "Critical ServiceNow AI Platform flaw CVE-2026-6875 is being actively exploited, enabling pre-auth sandbox escape and remote code execution. Patches are available for hosted and self-hosted instances. #ServiceNow #CVE20266875 #SearchlightCyber", "creation_timestamp": "2026-07-20T13:30:23.143603Z"}, {"uuid": "38da354e-d5dc-4de4-b8a3-b48ed20935bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mr3hgxzwed2g", "content": "\ud83d\udee1\ufe0f VULN: A critical pre-auth sandbox-escape RCE in ServiceNow AI Platform (CVE-2026-6875) is now exploited in the wild \u2014 Defused saw the first attempts Friday, days after ServiceNow's Jul 13 patch. Hits pre-auth sink /assessment_thanks.do. Patch self-hosted now. Src: BleepingComputer", "creation_timestamp": "2026-07-20T14:02:05.445036Z"}, {"uuid": "690732f4-f87f-4077-86b2-13ce696d5b91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mr3jkiw7v42h", "content": "ServiceNow\u3001\u8a8d\u8a3c\u4e0d\u8981\u306eRCE\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u308b(CVE-2026-6875)\n\n\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u4f01\u696d\u306eDefused\u306b\u3088\u308b\u3068\u3001\u653b\u6483\u8005\u304cServiceNow AI Platform\u306e\u8a8d\u8a3c\u524d(pre-authentication)\u8106\u5f31\u6027\u3067\u3042\u308bCVE-2026-6875\u306e\u60aa\u7528\u3092\u958b\u59cb\u3057\u3066\u3044\u307e\u3059\u3002 \u8106\u5f31\u6027\u306e\u6982\u8981 ServiceNow AI\u306f\u3001\u7d44\u7e54\u304c\u30c7\u30b8\u30bf\u30eb\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3092\u69cb\u7bc9\u30fb\u81ea\u52d5\u5316\u3067\u304d", "creation_timestamp": "2026-07-20T14:39:51.776963Z"}, {"uuid": "531fec86-3a9d-4960-beaf-a2848de2b2e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mr3lqbdw3s2n", "content": "ServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875)\n\nwww.helpnetsecurity.com/2026/07/20/s...\n\n#Cybersecurity #Cyber #SituationalAwareness", "creation_timestamp": "2026-07-20T15:18:54.974505Z"}, {"uuid": "976e1ad1-524f-4adc-8dd4-2c329cc35059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hackerdogs.bsky.social/post/3mr3mz523oq2s", "content": "Attackers are actively exploiting a critical pre-auth RCE vulnerability in ServiceNow AI Platform this week.\nhttps://www.helpnetsecurity.com/2026/07/20/servicenow-cve-2026-6875-exploited/", "creation_timestamp": "2026-07-20T15:41:43.087590Z"}, {"uuid": "3d9f9e38-1a7d-4e49-b13c-dc53539d8ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mr3ut6zome2e", "content": "\ud83d\udd12 Attackers Exploit ServiceNow CVE-2026-6875 via Multiple Sandbox-Escape Routes - Tech Times\n\nAttackers are exploiting the ServiceNow vulnerability CVE-2026-6875 by leveraging multi...\n\nhttps://tinyurl.com/28m36g6e #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-07-20T18:01:33.809492Z"}, {"uuid": "cc88eb75-c819-46f3-8fef-9bb580f5e830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6875", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mr3yo2awfc2j", "content": "\ud83d\udc1b VULNERABILITIES ServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875) \u2014 Help Net Security\nhttps://www.helpnetsecurity.com/2026/07/20/servicenow-cve-2026-6875-exploited/ #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-20T19:10:16.178743Z"}, {"uuid": "8f69ad73-90c0-4d84-afea-febb31a9d572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mr43syugsi2v", "content": "\ud83d\udd34 EXPLOITED\n\nServiceNow's pre-auth sandbox-escape flaw (CVE-2026-6875, CVSS 9.5) is being exploited in the wild.\n\nLive attacks use a different route than the public exploit, so blocking that PoC will not protect you.\n\nSelf-hosted instances are exposed. Patch now.", "creation_timestamp": "2026-07-20T20:06:44.314698Z"}, {"uuid": "a7125fb0-7ac0-411e-973a-3735995536d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mr45ptmjuo2j", "content": "ServiceNow has released security updates for a critical vulnerability (CVE-2026-6875) in its AI platform, allowing pre-authentication remote code execution. Disclosed by Assetnote, the flaw enables unauthenticated attackers to execute code, potentially compromising the entire ServiceNow instance.", "creation_timestamp": "2026-07-20T20:40:45.135711Z"}, {"uuid": "4b7c4c29-fe54-4e14-a26b-10d8d8ecced4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-23T00:00:44.022901Z"}, {"uuid": "c2da3d3e-e275-4525-9143-92ed53225680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2157", "content": "\ud83d\udd34 Critical ServiceNow code execution flaw now exploited in attacks\n\nAttackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused.\n\nFormerly known as the Now Platform, ServiceNow AI Platform is an enterprise-grade Platform-as-a-Service (PaaS) that helps businesses integrate AI into core enterprise workflows.", "creation_timestamp": "2026-08-23T00:00:44.747301Z"}, {"uuid": "b8f909b0-b37d-41b0-8c13-047a33b9eca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2177", "content": "\ud83d\udd34 Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875\n\nAttackers are exploiting critical ServiceNow flaw CVE-2026-6875, allowing unauthenticated remote code execution on self-hosted instances.\n\nSearchlight Cyber researchers disclosed a critical pre-authentication remote code execution vulnerability, tracked as CVE-2026-6875, in the ServiceNow AI Platform on July 14. The same day, ServiceNow released patches for self-hosted instances. Since July 17, attackers have started exploiting it in the wild.\n\n\u201cAfter finding our first pre-auth critical bug almost two years ago and having a much better understanding of the ServiceNow architecture, we decided to return and focus our efforts on a different corner of the codebase.\u201d reads the report published by Searchlight Cyber. \u201cOur efforts led to us finding a completely unauthenticated RCE, which allowed full compromise of the ServiceNow instance as well as all connected proxy servers.\u201d", "creation_timestamp": "2026-08-23T00:00:44.911874Z"}, {"uuid": "4ef42768-9b7c-4cb1-8c74-90f812bb5b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "https://t.me/BleepingComputer/25142", "content": "\u200aCritical ServiceNow code execution flaw now exploited in attacks\n\nAttackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-servicenow-code-execution-flaw-now-exploited-in-attacks/", "creation_timestamp": "2026-07-21T00:00:39.481008Z"}, {"uuid": "b690b002-1923-4519-aab3-b5016fc79801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mr4nm3aqp22a", "content": "Critical ServiceNow code execution flaw now exploited in attacks\n\nAttackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused. [...]\n#hackernews #news", "creation_timestamp": "2026-07-21T01:24:59.101514Z"}, {"uuid": "5166e5f4-ab53-4e1a-8680-e56381f86e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mr4x66bwuc2t", "content": "ServiceNow AI Platform\u306b\u672a\u8a8d\u8a3cRCE\u3092\u8a31\u3059\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u30a8\u30b9\u30b1\u30fc\u30d7 \u8106\u5f31\u6027(CVE-2026-6875)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u8106\u5f31\u6027", "creation_timestamp": "2026-07-21T04:16:12.933120Z"}, {"uuid": "e7fe220c-0189-4184-b22c-dde91b03c895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolta-vulnerabilita-in-servicenow", "content": "", "creation_timestamp": "2026-07-21T04:45:03.598514Z"}, {"uuid": "347348dc-4df7-4dbd-a672-a5f457ab8c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mr57dxg47j2n", "content": "ServiceNow AI Platform's critical flaw CVE-2026-6875 is under active exploitation. Apply patches now. #ServiceNow #CyberSecurity #AIPlatform #CVE20266875 #SecurityUpdate #PatchManagement thedailytechfeed.com/servicenow-a...", "creation_timestamp": "2026-07-21T06:42:33.838470Z"}, {"uuid": "4d335fe1-0df0-488c-850d-de00ad6eaf35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mr57jelolc2p", "content": "Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875\n\nsecurityaffairs.com/195723/ai/at...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-07-21T06:45:36.487602Z"}, {"uuid": "4e611052-34c3-4dc5-81d3-229491519a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr5auomzpb2g", "content": "Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875", "creation_timestamp": "2026-07-21T07:09:49.050792Z"}, {"uuid": "db09018e-ce5d-40d2-8c9a-40fd36f11994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mr5bwk3x7s2f", "content": "Critical ServiceNow AI Platform Flaw Under Active Attack, CVE-2026-6875 Gives Hackers Full System Control +\u00a0Video\n\nIntroduction, A Race Between Defenders and Attackers Cybersecurity researchers continue to uncover vulnerabilities that reshape how organizations think about enterprise software\u2026", "creation_timestamp": "2026-07-21T07:28:45.495515Z"}, {"uuid": "4d26f9f8-8927-4ab2-a54b-16a6cf56b56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mr5dfwvvck2y", "content": "Threat actors are exploiting CVE-2026-6875 in ServiceNow AI Platform to escape a sandbox and execute arbitrary code pre-authentication.\n", "creation_timestamp": "2026-07-21T07:55:15.362028Z"}, {"uuid": "d0134f98-c7cb-46dc-8df2-54c1c423ec78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "Telegram/PNVE9p6zizYCEVgjsMJ0OqJ_BvVfDy3Idj539T91Kq_v7Ee1", "content": "", "creation_timestamp": "2026-07-21T08:00:05.761017Z"}, {"uuid": "0c6c9816-7323-42a7-ae10-88f2df465953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/ctinow/253658", "content": "Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875\nhttps://ift.tt/htfMxUd", "creation_timestamp": "2026-07-21T08:00:05.813849Z"}, {"uuid": "db0c3d5f-322f-4f80-81ce-506831b09997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6875", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mr5e3yblel2w", "content": "\ud83d\udcf0 Celah RCE Kritis ServiceNow CVE-2026-6875 Mulai Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/21/servicenow-cve-2026-6875-rce-aktif-dieksploitasi/\n\n#cve-2026-6875 #cybersecurity #defused #keamananSiber #patch #rce #remoteCodeExecution #sandboxEscape #searchligh", "creation_timestamp": "2026-07-21T08:07:34.555683Z"}, {"uuid": "fe49e961-173e-49ab-b040-667d115b9be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mr5f7g5xym2r", "content": "\ud83e\udd16 CVE-2026-6875 (CVSS 9.5): Sandbox escape in ServiceNow AI Platform exploited in the wild \u2014 unauthenticated code execution. Patches available.\nhttps://thehackernews.com/2026/07/critical-servicenow-ai-platform-flaw.html", "creation_timestamp": "2026-07-21T08:27:23.617541Z"}, {"uuid": "4893c817-29f5-4713-a085-e49d2de59006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mr5fmoku3f25", "content": "Threat actors are actively exploiting CVE-2026-6875, a critical sandbox escape vulnerability in the ServiceNow AI Platform. The flaw, rated 9.5 [\u2026]", "creation_timestamp": "2026-07-21T08:34:49.125935Z"}, {"uuid": "6ed99290-a8bb-4de5-91c3-b4fc07fc721a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mr5gmvfw2m2d", "content": "CVE-2026-6875 in ServiceNow AI enables unauthenticated sandbox escape leading to arbitrary code execution and has been exploited in the wild.\n", "creation_timestamp": "2026-07-21T08:52:50.814987Z"}, {"uuid": "67910520-82d7-419a-89c1-d418d0644d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/thehackernews/9561", "content": "\u26a0\ufe0f Attackers are exploiting a critical ServiceNow AI Platform flaw in the wild.\n\nCVE-2026-6875 is a pre-authentication sandbox escape that could let an unauthenticated attacker run arbitrary code.\n\nSelf-hosted customers should check their patch status now.\n\nDetails: https://thehackernews.com/2026/07/critical-servicenow-ai-platform-flaw.html", "creation_timestamp": "2026-07-21T09:00:05.768751Z"}, {"uuid": "72c735f0-df00-4266-b4b4-9c75f23af878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mr5hlp6dr52n", "content": "ServiceNow CVE-2026-6875 (CVSS 9.5): unauth sandbox-escape RCE in AI Platform. Patched Jul 13, exploited in the wild since Jul 17. Vendor advisory still says no exploitation seen. Patch now, check your logs. \n\n\ud83c\uddec\ud83c\udde7 zurl.co/kIfAo\n\ud83c\udde9\ud83c\uddea zurl.co/qKP5D \n\n#DIESEC #CyberSecurity #CVE #ServiceNow", "creation_timestamp": "2026-07-21T09:10:03.827710Z"}, {"uuid": "c84a6cf1-d3f9-4d3f-babd-23bc4ec4c1a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/cve0day/459", "content": "CVE-2026-6875", "creation_timestamp": "2026-08-27T15:00:05.796222Z"}, {"uuid": "da3e430a-ea45-4d22-8a60-1f0d8ecec5d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-servicenow-ai-platform-flaw.html", "content": "Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber.\n\nIn a post shared on X, the threat intelligence firm said it's observing in-the-wild exploitation of CVE-2026-6875 (CVSS score: 9.5), a sandbox escape vulnerability that could allow an unauthenticated user to run arbitrary code.\n\nPatches for the flaw were", "creation_timestamp": "2026-07-21T10:00:54.043059Z"}, {"uuid": "b9dbdbfb-e8c2-495e-8fa3-909b85e86dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mr5srv2yqh27", "content": "ServiceNow's patched CVE-2026-6875 in its AI platform is reportedly being exploited days after disclosure. The critical sandbox escape may allow unauthenticated code execution. #ServiceNow #CVE-2026-6875 #SearchlightCyber", "creation_timestamp": "2026-07-21T12:30:21.786856Z"}, {"uuid": "8cffbaa1-d6d2-449b-a1f3-486b11b3155b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mr5v667g3c2a", "content": "ServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875)\n\nAttackers have begun exploiting CVE-2026-6875, a critical pre-authentication vulnerability in the ServiceNow AI Platform, according to threat intelligence firm Defused. About the vulnerability ServiceNow AI is a Platfo\u2026\n#hackernews #news", "creation_timestamp": "2026-07-21T13:13:02.454563Z"}, {"uuid": "769c0181-458e-4c5b-bb08-98a036711548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mr5wjycfak2j", "content": "Today's #CTI brief for 2026-07-21: \n\nThe exposed platform with no clear owner is the real problem. ServiceNow CVE-2026-6875 is reportedly under pre-auth RCE exploitation. Validate exposure and preserve logs before remediation changes the evidence.\n\n#ThreatIntel #VulnMgmt #IoT", "creation_timestamp": "2026-07-21T13:37:33.239970Z"}, {"uuid": "863e8e7e-e542-4f9f-8636-a14924dfa0cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mr5wjydhgc2j", "content": "Today's #CTI brief for 2026-07-21: \n\nThe exposed platform with no clear owner is the real problem. ServiceNow CVE-2026-6875 is reportedly under pre-auth RCE exploitation. Validate exposure and preserve logs before remediation changes the evidence.\n\n#ThreatIntel #VulnMgmt #IoT", "creation_timestamp": "2026-07-21T13:37:33.642307Z"}, {"uuid": "ee377e82-89ac-4ea4-a88c-7562f0727332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mr5wjygg5k2j", "content": "Today's #CTI brief for 2026-07-21: \n\nThe exposed platform with no clear owner is the real problem. ServiceNow CVE-2026-6875 is reportedly under pre-auth RCE exploitation. Validate exposure and preserve logs before remediation changes the evidence.\n\n#ThreatIntel #VulnMgmt #IoT", "creation_timestamp": "2026-07-21T13:37:34.063245Z"}, {"uuid": "457c74b2-f985-4728-bb2b-e451c0a0278d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mr5wjyjaxs2j", "content": "Today's #CTI brief for 2026-07-21: \n\nThe exposed platform with no clear owner is the real problem. ServiceNow CVE-2026-6875 is reportedly under pre-auth RCE exploitation. Validate exposure and preserve logs before remediation changes the evidence.\n\n#ThreatIntel #VulnMgmt #IoT", "creation_timestamp": "2026-07-21T13:37:34.478949Z"}, {"uuid": "38211de4-44ab-469a-8fb2-e88364697ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mr5wjyjbx22j", "content": "Today's #CTI brief for 2026-07-21: \n\nThe exposed platform with no clear owner is the real problem. ServiceNow CVE-2026-6875 is reportedly under pre-auth RCE exploitation. Validate exposure and preserve logs before remediation changes the evidence.\n\n#ThreatIntel #VulnMgmt #IoT", "creation_timestamp": "2026-07-21T13:37:34.917305Z"}, {"uuid": "a9f689af-e5a3-43d8-aa17-dc4bdc03aee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mr64traekx2n", "content": "Critical ServiceNow vulnerability now actively exploited in the wild. CISOs should prioritize patching CVE-2026-6875 affecting the AI\u2026\n\nhttps://www.bleepingcomputer.com/news/security/critical-servicenow-code-execution-flaw-now-exploited-in-attacks/\n\n#cybersecurity #infosec", "creation_timestamp": "2026-07-21T15:30:22.144366Z"}, {"uuid": "b2dac00e-f8c0-4e6b-8095-e1296f90fba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6875", "type": "seen", "source": "https://bsky.app/profile/intelnightowl.bsky.social/post/3mr6czbdwkh2g", "content": "Attackers exploit ServiceNow CVE\u20112026\u20116875 for unauthenticated remote code execution on self-hosted instances, escalating security for #UN to monitor critical infrastructure threats. #CyberSecurit https://securityaffairs.com/195723/ai/attackers-exploit-critical-servicenow-rce-flaw-cve-2026-6875.html", "creation_timestamp": "2026-07-21T17:20:49.847066Z"}, {"uuid": "e3f3d373-d12d-4363-9344-25721f46a038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "Telegram/pTBvhKaSs5dsg9UYS2CvF-QcmushCF-cC2Wyj5xEqjfnLA", "content": "", "creation_timestamp": "2026-07-21T19:00:06.301191Z"}, {"uuid": "a31c80be-d785-4cf1-bf8a-96e1844c5e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/psoheil.bsky.social/post/3mr6ljce5bc23", "content": "A critical remote code execution (RCE) vulnerability, CVE-2026-6875, in the ServiceNow AI Platform is now being actively exploited in the wild.\n\nwww.bleepingcomputer.com/news/securit...\n\n#CyberSecurity #ServiceNow #Vulnerability #CVE", "creation_timestamp": "2026-07-21T19:52:59.351429Z"}, {"uuid": "0eb02d3a-2e2f-411b-83d3-4220d9ddaf4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mr6ve5ff5s2w", "content": "CVE-2026-6875: Pre-Authentication RCE and Sandbox Escape in ServiceNow AI Platform\n\nhttps://expertinthecloud.co.za/vulnerability-in-the-servicenow-ai-platform\nhttps://flagthis.com/tldr/5339\n\n##ServiceNow ##RCE ##CloudSecurity ##SandboxEscape ##AI", "creation_timestamp": "2026-07-21T22:49:02.167004Z"}, {"uuid": "f4454305-44ca-44e1-961e-f40be790ca5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/sleepydogtsjp.bsky.social/post/3mr6wup66k22q", "content": "Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875: securityaffairs.com/195723/ai/at...", "creation_timestamp": "2026-07-21T23:16:21.244906Z"}, {"uuid": "a05fc85d-9d14-4a03-ad6b-84776a6bc7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3mr6y7e4sxu2v", "content": "ServiceNow CVE-2026-6875 lets unauthenticated attackers jump the script sandbox and run arbitrary code. Calling it an 'AI platform' doesn't change the fact that your underlying execution engine is exposed.", "creation_timestamp": "2026-07-21T23:40:02.233196Z"}, {"uuid": "813de7ea-65c9-4fc5-8a8b-a8f6854ab789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6875", "type": "seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3mr6y7fhxwl23", "content": "Full technical breakdown: https://sable.somoswilab.com/blog/servicenow-cve-2026-6875", "creation_timestamp": "2026-07-21T23:40:03.414582Z"}, {"uuid": "61995dea-a6ce-457e-bb29-e02104bd4528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "Telegram/pTBvhKaSs5dsg9UYS2CvF-QcmushCF-cC2Wyj5xEqjfnLA", "content": "", "creation_timestamp": "2026-07-22T00:00:07.061934Z"}, {"uuid": "f2578c1a-7b3e-4e78-89fe-8b845009c5a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "https://t.me/thehackernews/9561", "content": "\u26a0\ufe0f Attackers are exploiting a critical ServiceNow AI Platform flaw in the wild.\n\nCVE-2026-6875 is a pre-authentication sandbox escape that could let an unauthenticated attacker run arbitrary code.\n\nSelf-hosted customers should check their patch status now.\n\nDetails: https://thehackernews.com/2026/07/critical-servicenow-ai-platform-flaw.html", "creation_timestamp": "2026-07-22T00:00:27.184640Z"}, {"uuid": "af95c37a-5503-4620-9648-76176d9290de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/ctinow/253658", "content": "Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875\nhttps://ift.tt/htfMxUd", "creation_timestamp": "2026-07-22T00:00:27.898923Z"}, {"uuid": "e4c099aa-2d48-45f8-83be-55cebacc4414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "Telegram/PNVE9p6zizYCEVgjsMJ0OqJ_BvVfDy3Idj539T91Kq_v7Ee1", "content": "", "creation_timestamp": "2026-07-22T00:00:27.929766Z"}, {"uuid": "be4e4cd0-e149-4eb9-b1a1-0c1bf6383494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mr73flupvc2a", "content": "Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875\n\nAttackers are exploiting critical ServiceNow flaw CVE-2026-6875, allowing unauthenticated remote code execution on self-hosted instances. Searchlight Cyber researchers disclosed a critical pre-authentication remote code\u2026\n#hackernews #news", "creation_timestamp": "2026-07-22T00:37:16.097911Z"}, {"uuid": "811e5767-dea6-4134-ad3a-5499c1192b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-servicenow-ai-platform-flaw.html", "content": "Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber.\n\nIn a post shared on X, the threat intelligence firm said it's observing in-the-wild exploitation of CVE-2026-6875 (CVSS score: 9.5), a sandbox escape vulnerability that could allow an unauthenticated user to run arbitrary code.\n\nPatches for the flaw were", "creation_timestamp": "2026-07-22T01:00:42.834402Z"}, {"uuid": "de05bbb3-0240-471e-84f5-743e68e9fbdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mr7jkmsapj2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 68 interactions\nCVE-2026-60137: 54 interactions\nCVE-2026-58532: 47 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50522: 10 interactions\nCVE-2026-0257: 6 interactions\nCVE-2026-6875: 5 interactions\n", "creation_timestamp": "2026-07-22T04:50:34.160901Z"}, {"uuid": "5896caa8-bf9b-426f-b132-f848952dd940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mr7rrhuss42k", "content": "ServiceNow's CVE-2026-6875 is under active exploitation; immediate patching is crucial. #ServiceNow #CVE20266875 #CyberSecurity #Vulnerability #PatchManagement #InfoSec thedailytechfeed.com/critical-ser...", "creation_timestamp": "2026-07-22T07:17:45.863689Z"}, {"uuid": "bd1f4f7f-fdac-44c6-b85d-c2b82714f027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mr7tazs66ct3", "content": "ServiceNow\u306e\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\u3001\u653b\u6483\u3067\u306e\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u308b\uff08CVE-2026-6875\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/46757/", "creation_timestamp": "2026-07-22T07:44:24.998073Z"}, {"uuid": "e354e55e-a01b-4170-9564-6aefc4e046f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/ViralCyber/25419", "content": "\u2708\ufe0f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc ServiceNow \u062a\u0646\u0647\u0627 \u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 \u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc \u0622\u063a\u0627\u0632 \u0634\u062f\n\n\ud83c\udfa5 \u062a\u0646\u0647\u0627 \u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 \u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc CVE-2026-6875 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc ServiceNow\u060c \u06af\u0632\u0627\u0631\u0634\u200c\u0647\u0627\u06cc\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0641\u0636\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\ud83c\udfa4\u0634\u0631\u06a9\u062a ServiceNow \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0632 \u06f1\u06f4 \u0698\u0648\u0626\u06cc\u0647 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0648 \u0627\u0632 \u062a\u0645\u0627\u0645\u06cc \u0645\u0634\u062a\u0631\u06cc\u0627\u0646\u060c \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f\u0645\u06cc\u0632\u0628\u0627\u0646\u060c \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0634\u0648\u0627\u0647\u062f\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc\u200c\u0634\u062f\u0647 \u062e\u0648\u062f \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-22T10:00:03.589556Z"}, {"uuid": "ec0c1c07-b929-4939-aaab-2459350f9eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "Telegram/n3uWueD2sTO0Gesje2FH-rOuWllBA7Wb8AqCvewrubDKEoo", "content": "", "creation_timestamp": "2026-07-22T17:00:05.643161Z"}, {"uuid": "eafcd3a8-200f-4988-a827-9b475ae44909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116963617230582633", "content": "In a post shared on X, the threat intelligence firm said it's observing in-the-wild exploitation of CVE-2026-6875 (CVSS score: 9.5), a sandbox escape vulnerability that could allow an unauthenticated user to run arbitrary code. https://thehackernews.com/2026/07/critical-servicenow-ai-platform-flaw.html", "creation_timestamp": "2026-07-22T12:26:03.742990Z"}, {"uuid": "d3a443bb-4152-4ea4-b3bb-92aa4a79ce4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mragsslifs2w", "content": "Hackers are actively exploiting a critical ServiceNow RCE vulnerability (CVE-2026-6875) to bypass sandbox restrictions and breach corporate networks.\n\n#ServiceNow #Vulnerability #RCE #CVE20266875 #Cybersecurity #Infosec", "creation_timestamp": "2026-07-22T13:34:07.446163Z"}, {"uuid": "09bcfe17-d87a-46d2-a61f-503ab5f7fc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6875.yaml", "content": "", "creation_timestamp": "2026-07-22T15:00:04.050835Z"}, {"uuid": "5de95d18-4c5f-4d76-a889-54e2f361b014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/true_secator/8430", "content": "\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-6875 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ServiceNow AI \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0441\u043f\u0443\u0441\u0442\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-6875 \u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0445\u043e\u0434\u0430 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n14 \u0438\u044e\u043b\u044f, \u043e\u0431\u044a\u044f\u0432\u043b\u044f\u044f \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, ServiceNow \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0431\u044b\u043b\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e \u043d\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e.\n\n\u0412 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c Searchlight Cyber \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\u00a0\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Defused 18 \u0438\u044e\u043b\u044f \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-6875 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 Searchlight Cyber.\u00a0\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e Defused \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u0440\u0438\u0432\u0435\u043b \u043a \u0442\u043e\u043c\u0443 \u0436\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0443, \u0447\u0442\u043e \u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Searchlight, \u043d\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u043d\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a Defused \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0440\u043e\u0432\u0435\u0440\u0436\u0435\u043d\u0438\u0435, \u0437\u0430\u044f\u0432\u043b\u044f\u044f, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u0430\u043b: \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u0430 \u0442\u043e\u0439, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c Searchlight Cyber.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0435\u043c\u0443 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438 \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0434\u0430\u043d\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043e.\n\n\u0412 ServiceNow \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0441\u0432\u043e\u044e \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0434\u043d\u043e\u0439 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u0441\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-6875. \u041d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 ServiceNow \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u044d\u0442\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 ServiceNow.\u00a0\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043b\u0438\u0448\u044c \u0435\u0449\u0435 \u0440\u0430\u0437 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044f  \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043a\u0430\u043a \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0442\u0430\u043a \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 ServiceNow, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2026-6875 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e, \u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0430 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0418\u0411-\u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438, \u0441\u0442\u0440\u0435\u043c\u044f\u0449\u0438\u043c\u0438\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 ServiceNow \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u043f\u043e\u0437\u0436\u0435 \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0438\u0441\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0430 \u043d\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ServiceNow \u0440\u0435\u0434\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0412 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435\u00a0KEV CISA \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0432\u0441\u0435\u0433\u043e \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043e\u0431\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 2024 \u0433\u043e\u0434\u0443. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u0432\u0441\u0435 \u0436\u0435 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-07-22T15:00:04.401766Z"}, {"uuid": "a7d296fb-7691-471d-bc97-0e542391b978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/HackerNewscyber/3273", "content": "\u2708\ufe0f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc ServiceNow \u062a\u0646\u0647\u0627 \u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 \u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc \u0622\u063a\u0627\u0632 \u0634\u062f\n\n\ud83c\udfa5 \u062a\u0646\u0647\u0627 \u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 \u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc CVE-2026-6875 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc ServiceNow\u060c \u06af\u0632\u0627\u0631\u0634\u200c\u0647\u0627\u06cc\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0641\u0636\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\ud83c\udfa4\u0634\u0631\u06a9\u062a ServiceNow \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0632 \u06f1\u06f4 \u0698\u0648\u0626\u06cc\u0647 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0648 \u0627\u0632 \u062a\u0645\u0627\u0645\u06cc \u0645\u0634\u062a\u0631\u06cc\u0627\u0646\u060c \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f\u0645\u06cc\u0632\u0628\u0627\u0646\u060c \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0634\u0648\u0627\u0647\u062f\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc\u200c\u0634\u062f\u0647 \u062e\u0648\u062f \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-22T16:00:04.494067Z"}, {"uuid": "2d2cb91d-25fc-40ed-a12e-4159c7c123a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "content": "", "creation_timestamp": "2026-07-22T17:00:04.709307Z"}, {"uuid": "f5a5d109-ba34-4db6-9204-7dbb29c60d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6875.yaml", "content": "", "creation_timestamp": "2026-07-23T00:00:03.472601Z"}, {"uuid": "355158d0-9154-4721-a4ea-3ade2fa856b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "published-proof-of-concept", "source": "Telegram/n3uWueD2sTO0Gesje2FH-rOuWllBA7Wb8AqCvewrubDKEoo", "content": "", "creation_timestamp": "2026-07-23T00:00:08.899776Z"}, {"uuid": "27ee01b9-96a3-4381-8bb5-1ed1f56b4971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "https://t.me/true_secator/8430", "content": "\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-6875 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ServiceNow AI \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0441\u043f\u0443\u0441\u0442\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-6875 \u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0445\u043e\u0434\u0430 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n14 \u0438\u044e\u043b\u044f, \u043e\u0431\u044a\u044f\u0432\u043b\u044f\u044f \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, ServiceNow \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0431\u044b\u043b\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e \u043d\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e.\n\n\u0412 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c Searchlight Cyber \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\u00a0\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Defused 18 \u0438\u044e\u043b\u044f \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u0435\u0440\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-6875 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 Searchlight Cyber.\u00a0\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e Defused \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u0440\u0438\u0432\u0435\u043b \u043a \u0442\u043e\u043c\u0443 \u0436\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0443, \u0447\u0442\u043e \u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Searchlight, \u043d\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u043d\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a Defused \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0440\u043e\u0432\u0435\u0440\u0436\u0435\u043d\u0438\u0435, \u0437\u0430\u044f\u0432\u043b\u044f\u044f, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u0430\u043b: \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u0430 \u0442\u043e\u0439, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c Searchlight Cyber.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0435\u043c\u0443 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438 \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0434\u0430\u043d\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043e.\n\n\u0412 ServiceNow \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0441\u0432\u043e\u044e \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0434\u043d\u043e\u0439 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u0441\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-6875. \u041d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 ServiceNow \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u044d\u0442\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 ServiceNow.\u00a0\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043b\u0438\u0448\u044c \u0435\u0449\u0435 \u0440\u0430\u0437 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044f  \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043a\u0430\u043a \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0442\u0430\u043a \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 ServiceNow, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2026-6875 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e, \u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0430 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0418\u0411-\u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438, \u0441\u0442\u0440\u0435\u043c\u044f\u0449\u0438\u043c\u0438\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 ServiceNow \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u043f\u043e\u0437\u0436\u0435 \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0438\u0441\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0430 \u043d\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ServiceNow \u0440\u0435\u0434\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0412 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435\u00a0KEV CISA \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0432\u0441\u0435\u0433\u043e \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043e\u0431\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 2024 \u0433\u043e\u0434\u0443. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u0432\u0441\u0435 \u0436\u0435 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-07-23T00:00:23.151527Z"}, {"uuid": "7af6fc70-b5b1-4c3d-916f-527f77a044b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "https://t.me/ViralCyber/25419", "content": "\u2708\ufe0f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc ServiceNow \u062a\u0646\u0647\u0627 \u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 \u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc \u0622\u063a\u0627\u0632 \u0634\u062f\n\n\ud83c\udfa5 \u062a\u0646\u0647\u0627 \u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 \u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc CVE-2026-6875 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc ServiceNow\u060c \u06af\u0632\u0627\u0631\u0634\u200c\u0647\u0627\u06cc\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0641\u0636\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\ud83c\udfa4\u0634\u0631\u06a9\u062a ServiceNow \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0632 \u06f1\u06f4 \u0698\u0648\u0626\u06cc\u0647 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0648 \u0627\u0632 \u062a\u0645\u0627\u0645\u06cc \u0645\u0634\u062a\u0631\u06cc\u0627\u0646\u060c \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f\u0645\u06cc\u0632\u0628\u0627\u0646\u060c \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0634\u0648\u0627\u0647\u062f\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc\u200c\u0634\u062f\u0647 \u062e\u0648\u062f \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-23T00:00:23.472658Z"}, {"uuid": "422a8649-3231-4bcb-9e36-b5e4bc106970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "published-proof-of-concept", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "content": "", "creation_timestamp": "2026-07-23T00:00:09.491040Z"}, {"uuid": "3a5558d0-1e54-4a3c-b3a7-4671d0480318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "https://t.me/HackerNewscyber/3273", "content": "\u2708\ufe0f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc ServiceNow \u062a\u0646\u0647\u0627 \u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 \u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc \u0622\u063a\u0627\u0632 \u0634\u062f\n\n\ud83c\udfa5 \u062a\u0646\u0647\u0627 \u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 \u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc CVE-2026-6875 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc ServiceNow\u060c \u06af\u0632\u0627\u0631\u0634\u200c\u0647\u0627\u06cc\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0641\u0636\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\ud83c\udfa4\u0634\u0631\u06a9\u062a ServiceNow \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0632 \u06f1\u06f4 \u0698\u0648\u0626\u06cc\u0647 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0648 \u0627\u0632 \u062a\u0645\u0627\u0645\u06cc \u0645\u0634\u062a\u0631\u06cc\u0627\u0646\u060c \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f\u0645\u06cc\u0632\u0628\u0627\u0646\u060c \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0634\u0648\u0627\u0647\u062f\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc\u200c\u0634\u062f\u0647 \u062e\u0648\u062f \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-23T00:00:10.436197Z"}, {"uuid": "5b83585a-0155-4d17-a0dc-be767a7d0441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/information_security_channel/55601", "content": "Exploitation of ServiceNow Vulnerability Seen Days After Disclosure\nhttps://www.securityweek.com/exploitation-of-servicenow-vulnerability-seen-days-after-disclosure/\n\nThe ServiceNow AI platform vulnerability tracked as CVE-2026-6875 can be exploited for remote code execution.\nThe post Exploitation of ServiceNow Vulnerability Seen Days After Disclosure (https://www.securityweek.com/exploitation-of-servicenow-vulnerability-seen-days-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-23T04:00:04.943646Z"}, {"uuid": "4b082f46-0f2a-4e0e-bea4-2ef11568fea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/GithubRedTeam/94524", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Bypass #WAF #Sandbox\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6875-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 18:07:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-6875 ServiceNow Pre-Auth RCE Framework \ud83d\udd25 JS Injection \u2192 Sandbox Escape \u2192 RCE \u2192 Root. Features: --detect, --exec, reverse/interactive shell, batch threading, WAF bypass, persistence, lateral movement, credential dump, fileless exec, clean tracks. \ud83d\udee1\ufe0f CVSS 9.5 actively exploited. Authorized & Legal use only. Stay Legal. \ud83d\udd12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:06.304413Z"}, {"uuid": "d2eeec69-6f99-4799-ba42-afad367a39b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6875.yaml", "content": "", "creation_timestamp": "2026-07-24T00:00:04.624974Z"}, {"uuid": "dd023244-dfe0-4bc4-8ce3-8f172a361231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "https://t.me/GithubRedTeam/94524", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Bypass #WAF #Sandbox\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6875-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 18:07:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-6875 ServiceNow Pre-Auth RCE Framework \ud83d\udd25 JS Injection \u2192 Sandbox Escape \u2192 RCE \u2192 Root. Features: --detect, --exec, reverse/interactive shell, batch threading, WAF bypass, persistence, lateral movement, credential dump, fileless exec, clean tracks. \ud83d\udee1\ufe0f CVSS 9.5 actively exploited. Authorized & Legal use only. Stay Legal. \ud83d\udd12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:10.822409Z"}, {"uuid": "ca2e995a-2f97-420c-b442-71c1205bf2e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "https://t.me/information_security_channel/55601", "content": "Exploitation of ServiceNow Vulnerability Seen Days After Disclosure\nhttps://www.securityweek.com/exploitation-of-servicenow-vulnerability-seen-days-after-disclosure/\n\nThe ServiceNow AI platform vulnerability tracked as CVE-2026-6875 can be exploited for remote code execution.\nThe post Exploitation of ServiceNow Vulnerability Seen Days After Disclosure (https://www.securityweek.com/exploitation-of-servicenow-vulnerability-seen-days-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-24T00:00:21.644284Z"}, {"uuid": "c14364d3-d563-4d28-9a3a-ad65d5c72fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mre2ldzbfk2q", "content": "ServiceNow\u306e\u8106\u5f31\u6027 CVE-2026-6875\u3001\u30d1\u30c3\u30c1\u7fcc\u65e5\u306ePoC\u516c\u958b\u304b\u30894\u65e5\u3067\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3078\u60aa\u7528\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #cyberattack #incident #\u8106\u5f31\u6027", "creation_timestamp": "2026-07-24T00:05:55.409228Z"}, {"uuid": "76e34d8e-12bf-4000-8a9b-4f8614e5b113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mrebalpk4g2u", "content": "CVE-2026-6875: Active Attacks on Self-Hosted ServiceNow; Cloud Protected Since April", "creation_timestamp": "2026-07-24T02:05:06.370898Z"}, {"uuid": "014510c7-0bf5-4aa5-8f9d-fd4e7b49f94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mrebgpzvbd2d", "content": "The latest update for #Indusface includes \"CVE-2026-6875: ServiceNow Sandbox Escape Leads to Pre-Auth RCE in AI Platform\" and \"WP2Shell: #WordPress Core SQLi + REST API Chain to Pre-Auth RCE\".\n \n#cybersecurity #infosec https://opsmtrs.com/3ySs2VF", "creation_timestamp": "2026-07-24T02:08:32.034549Z"}, {"uuid": "770719d0-12df-4aa9-a3a3-1671cd3935c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6875.yaml", "content": "", "creation_timestamp": "2026-07-25T00:00:06.574676Z"}, {"uuid": "68382585-5701-421d-a5ef-498225ccf995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/ralphdev.bsky.social/post/3mrgmg3xavx2h", "content": "CVE-2026-6875: pre-auth RCE in ServiceNow's AI Platform, exploited in the wild days after the patch. One endpoint gave attackers table reads, admin users, and shell. The agent platform holds more privilege than anything it automates. That is the new domain controller.", "creation_timestamp": "2026-07-25T00:30:22.395984Z"}, {"uuid": "04898484-2f40-4def-aca8-c56f72f5e0d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrh3okxisg27", "content": "Daily IT Security Digest \u2014 2026-07-25\n(CVE-2026-6875)\nHackers are actively exploiting a critical remote-code-execution vulnerability in ServiceNow to bypass sandbox restrictions and breach corporate networks. The vulnerability is CVE-2026-6875 and attackers are using it to gain footholds in targeted", "creation_timestamp": "2026-07-25T05:03:31.863834Z"}, {"uuid": "99c63b9f-211d-445d-9267-f0467e5545f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17603", "content": "\ud83d\udd25 CVE-2026-6875 - ServiceNow Pre-Auth RCE Framework & Verification Tool\nA research-focused repository for analyzing CVE-2026-6875, a critical pre-auth Remote Code Execution (RCE) vulnerability affecting self-hosted ServiceNow AI Platform deployments. The project includes both a non-intrusive verification tool and a research framework for vulnerability analysis.\n\n\ud83d\udccc GitHub  \n\ud83d\udc49 https://github.com/tc4dy/CVE-2026-6875-PoC-Exploit\n\n\u2728 Features\n\u2022 Safe verification mode for authorized security assessments\n\u2022 ServiceNow instance and version detection\n\u2022 JavaScript injection validation\n\u2022 Sandbox escape verification\n\u2022 JSON reporting for assessment results\n\u2022 Confidence scoring based on collected evidence\n\u2022 Batch scanning support for multiple targets\n\u2022 Research documentation covering vulnerability workflow\n\n\ud83d\udcbb Platform / Technologies\n\u2022 Python\n\u2022 ServiceNow AI Platform\n\u2022 JavaScript\n\u2022 JSON\n\n\ud83c\udfaf Ideal For\n\u2022 Security Researchers\n\u2022 Penetration Testers\n\u2022 Blue Team Analysts\n\u2022 Incident Responders\n\u2022 Vulnerability Assessment Teams\n\u2022 Red Team (Authorized Environments)\n\u2022 SOC Analysts\n\n\u26a0\ufe0f Research & Defensive Use Only\nThis repository discusses a high-severity vulnerability that has been publicly documented. Any testing should be performed only on systems you own or are explicitly authorized to assess. The included verification functionality is intended to support defensive validation, security research, and patch verification.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T04:00:05.560761Z"}, {"uuid": "71681741-b9e9-49ac-8f52-d542d7231a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://t.me/ZerodayAlert/774", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 ServiceNow\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6875 (9,5 Critical) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 ServiceNow \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 GlideRecord, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Searchlight Cyber \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0435\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 1 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0433\u043e\u0434\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e ServiceNow \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0437\u0430\u0449\u0438\u0442\u0438\u043b\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e, \u0432\u044b\u0448\u043b\u0438 13 \u0438\u044e\u043b\u044f.\n\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Defused 17 \u0438\u044e\u043b\u044f, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 assessment_thanks.do. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c Defused \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0437\u0430\u0449\u0438\u0442\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0438\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u0447\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438, \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0433\u043e \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f.\n\n#servicenow #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #GlideRecord #cve\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:05.375265Z"}, {"uuid": "684e4317-6ddd-454b-bdd9-b693c0520264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6875.yaml", "content": "", "creation_timestamp": "2026-07-26T00:00:03.819693Z"}, {"uuid": "02df54df-d9e4-494e-bf19-4979502d3e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "exploited", "source": "https://t.me/ZerodayAlert/774", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 ServiceNow\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6875 (9,5 Critical) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 ServiceNow \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 GlideRecord, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Searchlight Cyber \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0435\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 1 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0433\u043e\u0434\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e ServiceNow \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0437\u0430\u0449\u0438\u0442\u0438\u043b\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e, \u0432\u044b\u0448\u043b\u0438 13 \u0438\u044e\u043b\u044f.\n\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Defused 17 \u0438\u044e\u043b\u044f, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 assessment_thanks.do. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c Defused \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0437\u0430\u0449\u0438\u0442\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0438\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u0447\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438, \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0433\u043e \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f.\n\n#servicenow #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #GlideRecord #cve\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:40.806118Z"}, {"uuid": "f3c6e725-bc70-4e0a-ab07-e9107c52928c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrm4kxj4tq23", "content": "Daily IT Security Digest \u2014 2026-07-27\n# Daily IT Security Digest \u2014 2026-07-27\n\n## 1. ServiceNow RCE Vulnerability (CVE-2026-6875) Actively Exploited in the Wild\nA critical remote code execution vulnerability in ServiceNow (CVE-2026-6875) is being actively exploited by attackers to bypass sandbox", "creation_timestamp": "2026-07-27T05:02:43.293172Z"}, {"uuid": "ea646837-e4aa-4487-88fd-e912a6f79158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrjm4wac2m2u", "content": "Daily IT Security Digest \u2014 2026-07-26\n# Daily IT Security Digest \u2014 2026-07-26\n\n\n\n## 2. ServiceNow RCE (CVE-2026-6875) Actively Exploited\n\n**CVSS: Critical**", "creation_timestamp": "2026-07-26T05:03:12.573197Z"}, {"uuid": "c03e69d7-6c73-460b-b12f-6a50953da942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mrmtx7nzd52d", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-16232, CVE-2026-63030, CVE-2026-60137, CVE-2026-6875, CVE-2026-50522\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-07-27T12:01:10.437585Z"}, {"uuid": "b215b020-9926-44d6-94df-ef67e14591b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mromz2can32o", "content": "Daily IT Security Digest \u2014 2026-07-28\n@EUVD_Bot](https://mastodon.social/@EUVD_Bot/116995134909328961), [https://mastodon.social/@EUVD_Bot/116995134827273183](https://mastodon.social/@EUVD_Bot/116995134756546919)\n\n## 2. ServiceNow Critical RCE (CVE-2026-6875) Actively Exploited\n\nHackers are actively", "creation_timestamp": "2026-07-28T05:02:15.106253Z"}, {"uuid": "5e56f6e2-8e4b-491a-b2e7-52c20b02a4e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mromz2l3g42h", "content": "Daily IT Security Digest \u2014 2026-07-28\nabusing a critical remote code execution vulnerability in ServiceNow (CVE-2026-6875) to bypass sandbox restrictions and breach corporate networks. The vulnerability allows attackers to execute arbitrary code within ServiceNow environments, potentially leading", "creation_timestamp": "2026-07-28T05:02:15.611546Z"}, {"uuid": "bf302628-e758-43dc-bdb1-277b49f43859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17603", "content": "\ud83d\udd25 CVE-2026-6875 - ServiceNow Pre-Auth RCE Framework & Verification Tool\nA research-focused repository for analyzing CVE-2026-6875, a critical pre-auth Remote Code Execution (RCE) vulnerability affecting self-hosted ServiceNow AI Platform deployments. The project includes both a non-intrusive verification tool and a research framework for vulnerability analysis.\n\n\ud83d\udccc GitHub  \n\ud83d\udc49 https://github.com/tc4dy/CVE-2026-6875-PoC-Exploit\n\n\u2728 Features\n\u2022 Safe verification mode for authorized security assessments\n\u2022 ServiceNow instance and version detection\n\u2022 JavaScript injection validation\n\u2022 Sandbox escape verification\n\u2022 JSON reporting for assessment results\n\u2022 Confidence scoring based on collected evidence\n\u2022 Batch scanning support for multiple targets\n\u2022 Research documentation covering vulnerability workflow\n\n\ud83d\udcbb Platform / Technologies\n\u2022 Python\n\u2022 ServiceNow AI Platform\n\u2022 JavaScript\n\u2022 JSON\n\n\ud83c\udfaf Ideal For\n\u2022 Security Researchers\n\u2022 Penetration Testers\n\u2022 Blue Team Analysts\n\u2022 Incident Responders\n\u2022 Vulnerability Assessment Teams\n\u2022 Red Team (Authorized Environments)\n\u2022 SOC Analysts\n\n\u26a0\ufe0f Research & Defensive Use Only\nThis repository discusses a high-severity vulnerability that has been publicly documented. Any testing should be performed only on systems you own or are explicitly authorized to assess. The included verification functionality is intended to support defensive validation, security research, and patch verification.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-29T00:00:28.779299Z"}, {"uuid": "0acf9abb-41ec-488c-83cd-bcbbd9d0177d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6875", "type": "seen", "source": "https://bsky.app/profile/isuvo.bsky.social/post/3mrqfv42pw62j", "content": "CVE-2026-6875 (CVSS 9.5) is under active exploit, targeting ServiceNow's AI execution layer. Here is my technical breakdown of how sandbox escapes work and how to secure your AI runtimes:  #Cybersecurity #Infosec\n\nhttps://ixuvo.com/blog/servicenow-cve-2026-6875-sandbox-escape-analysis", "creation_timestamp": "2026-07-28T22:00:06.286919Z"}, {"uuid": "5a8f75aa-53a2-44cb-a3ed-5f4b725129cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrr5ieolns2q", "content": "Daily IT Security Digest \u2014 2026-07-29\n@opsmatters.com/bsky]\n\n2. **ServiceNow RCE (CVE-2026-6875) Actively Exploited** \u2014 Hackers are actively exploiting a critical ServiceNow remote code execution vulnerability to bypass sandbox restrictions and breach corporate networks. Organizations using", "creation_timestamp": "2026-07-29T05:02:29.051989Z"}, {"uuid": "c0854f1e-4882-4466-a89b-5b1aa0c35998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mrt56bbutr2u", "content": "The latest update for #Indusface includes \"CVE-2026-56164: Unauthenticated SharePoint Zero-Day Grants Farm Administrator Access\" and \"CVE-2026-6875: ServiceNow Sandbox Escape Leads to Pre-Auth RCE in #AI Platform\".\n \n#cybersecurity #infosec https://opsmtrs.com/3ySs2VF", "creation_timestamp": "2026-07-30T00:02:09.597009Z"}, {"uuid": "4edf8e26-0abe-4505-bc80-20ff9270e4ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6875", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117197399950678378", "content": "RE: https://infosec.exchange/@cR0w/117169327022091327\nUpdate:\n\nUpdate - September 1st, 2026\nDue to additional analysis provided by the security researcher who discovered CVE-2026-6875, we have upgraded the severity rating of CVE-2026-6876 from High to Critical. This change affects only the severity rating for CVE-2026-6876; it does not change the other information shared in our August 27th advisory. Based on our monitoring to date, we have not observed evidence of malicious exploitation of this issue.", "creation_timestamp": "2026-09-01T19:20:05.431059Z"}]}