{"vulnerability": "CVE-2026-86860", "sightings": [{"uuid": "8c6212bb-7446-4e1d-ace4-72d57430f022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86860", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbz47vcx72u", "content": "CVE-2026-86860 - servicenow ai platform\nThe ServiceNow AI Platform could allow anyone on the internet to retrieve data from your instance that should be restricted, potentially giving them higher access than\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#servicenow #CVE #infosec", "creation_timestamp": "2026-09-24T19:40:08.213142Z"}, {"uuid": "f222039b-0cfb-4936-8bac-85cb8b6b7afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86860", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwc2p4dl5h2f", "content": "\ud83d\udea8 CVE-2026-86860 \u2014 CVSS 9.3 CRITICAL\n\nServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Pl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86860\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-24T20:08:41.425962Z"}, {"uuid": "df349c4b-f6d3-4943-90dc-4f38e3016b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86860", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aovwemcric2v2", "content": "CVE-2026-86860 - Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform\nCVE ID : CVE-2026-86860\n \n Published : 24. September 2026 19:17 | 38\u00a0Minuten ago\n \n Description : ServiceNow has remediated a missing authorization vulnerability that was identified in the Ser...", "creation_timestamp": "2026-09-24T20:27:57.999253Z"}, {"uuid": "2485d966-c445-40ee-b818-95fba4d501e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86860", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117328190622884676", "content": "Hack and patch more ServiceNow shit.\nhttps://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623\n\nOn September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.ServiceNow did not identify evidence of malicious exploitation related to these issues.", "creation_timestamp": "2026-09-24T21:41:53.634952Z"}, {"uuid": "9caa2591-ad1e-4d5d-a05a-b79a5aefe5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86860", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-servicenow", "content": "", "creation_timestamp": "2026-09-25T02:40:33.000000Z"}]}