Vulnerabilities and exploitation targeting ServiceNow's platform and its AI Platform / Now Assist surfaces — a high-value enterprise SaaS foothold that frequently holds sensitive IT, HR, and workflow data across large organizations. Combined article + CVE feed for the ServiceNow beat.https://0daynews.com/en-ushttps://0daynews.com/cve/cve-2024-4879/https://0daynews.com/cve/cve-2024-4879/ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely. Thu, 03 Sep 2026 00:00:00 GMTServiceNowcriticalcvehttps://0daynews.com/cve/cve-2024-5217/https://0daynews.com/cve/cve-2024-5217/ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely.Thu, 03 Sep 2026 00:00:00 GMTServiceNowcriticalcvehttps://0daynews.com/cve/cve-2026-6875/https://0daynews.com/cve/cve-2026-6875/An unauthenticated attacker can, under certain circumstances, execute code on the ServiceNow AI Platform. Patched by ServiceNow on hosted instances; self-hosted customers and partners must apply the shipped updates.Thu, 03 Sep 2026 00:00:00 GMTServiceNowcriticalcvehttps://0daynews.com/articles/2026-08-29-servicenow-three-cvss10-ai-platform-flaws/https://0daynews.com/articles/2026-08-29-servicenow-three-cvss10-ai-platform-flaws/ServiceNow patches three CVSS 10.0 AI Platform flaws. Self-hosted customers must update now; hosted instances were auto-patched August 28.Sat, 29 Aug 2026 00:30:00 GMTServiceNowarticlehttps://0daynews.com/articles/2026-07-20-servicenow-ai-platform-cve-2026-6875-defused-exploitation/https://0daynews.com/articles/2026-07-20-servicenow-ai-platform-cve-2026-6875-defused-exploitation/Threat-intel firm Defused reports active exploitation of ServiceNow AI Platform CVE-2026-6875, a week after ServiceNow said it saw none.Mon, 20 Jul 2026 10:30:00 GMTServiceNowarticle