CVE-2026-0542criticalCWE-653

CVE-2026-0542: fallo crítico en ServiceNow AI Platform

Remote Code Execution in ServiceNow AI Platform

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear ServiceNow AI Platform

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.2epss 0.7%
ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow Sandbox.    ServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates also have been provided to ServiceNow self-hosted customers and partners. Further, the vulnerability is addressed in the listed patches and hot fixes. While we are not currently aware of exploitation against customer instances, we recommend customers promptly apply appropriate updates or upgrade if they have not already done so.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
ServiceNow · ServiceNow AI Platform
CVEs relacionadas — ServiceNow AI Platform

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-18885CRITICALUnauthenticated Remote Code Execution in GraphQL Composite Data APIEPSS 7.2%CVE-2026-74820CRITICALUnauthenticated SQL Injection via Dynamic Schema ORDER BY ClauseEPSS 5.1%CVE-2026-18886CRITICALUnauthenticated Privilege Escalation via System Configuration Image Upload ProcessorEPSS 5.0%CVE-2026-6875CRITICALSandbox Escape in ServiceNow AI PlatformEPSS 1.4%CVE-2026-6876CRITICALSandbox Escape in ServiceNow AI PlatformEPSS 0.7%CVE-2026-103093CRITICALSandbox Escape via Table Rotation in ServiceNow AI PlatformEPSS 0.4%