ServiceNow drops urgent updates for trio of critical 10.0 flaws and sandbox escape
ServiceNow released security updates addressing four vulnerabilities in its AI Platform (formerly the Now Platform), including three maximum-severity flaws carrying a perfect 10.0 CVSS score. The trio of critical flaws comprises CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820. Specifically, CVE-2026-18885 is a code injection flaw in the GraphQL Composite Data API enabling unauthenticated remote code execution and data tampering. CVE-2026-18886 involves improper access control in the system configuration image upload processor that allows unauthenticated actors to modify data and escalate privileges. Meanwhile, CVE-2026-74820 allows unauthenticated attackers to execute arbitrary SQL queries against the underlying database via a dynamic schema ORDER BY clause. Each of these three vulnerabilities is network-reachable with low attack complexity, requiring no prior privileges or user interaction. Alongside these, ServiceNow addressed CVE-2026-6876, a high-severity sandbox escape rated at 8.7 that allows arbitrary code execution. Affected major releases include Xanadu, Yokohama, Zurich, and Australia, spanning various patch and hotfix levels. ServiceNow has deployed automatic patches across its hosted cloud instances, but operators managing self-hosted infrastructure must deploy the fixes manually. While ServiceNow reported no known active exploitation for these specific flaws at publication time, prior platform flaws have frequently been targeted in the wild.
Commentary
ServiceNow is the operational nervous system for many enterprises, housing everything from active incident tickets and IT assets to human resources records and API credentials. When unauthenticated 10.0 CVSS flaws hit a central platform like this, the threat model escalates immediately. Given the low complexity vector (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N) across all three critical bugs, automated scanning and weaponization are practically inevitable. The specific bug mechanics—especially dynamic ORDER BY injection in the database schema and GraphQL API injection—are typical candidates for rapid script-kiddie triage once diffs are reverse-engineered. While ServiceNow-managed SaaS tenants get background remediation, self-hosted or partner-managed deployments remain exposed until admins push updates. SecOps teams running on-prem or isolated private cloud instances need to patch immediately across the affected Xanadu, Yokohama, Zurich, and Australia tracks. In addition to patching, blue teams should monitor logs for unusual GraphQL payload patterns, unexpected image upload processor endpoints hits, and anomalies in database SQL queries.
The Quote to Remember
“The three maximum-severity flaws share the vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H, describing a network-reachable attack of low complexity that requires no privileges and no user interaction...”
“We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so”