{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: ServiceNow vulnerabilities","home_page_url":"https://patchfirst.co/vendor/servicenow/","feed_url":"https://patchfirst.co/feed/vendor/servicenow.json","description":"New and newly exploited ServiceNow CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-103093","url":"https://patchfirst.co/cve/CVE-2026-103093/","title":"CVE-2026-103093: ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform","content_text":"ServiceNow · ServiceNow AI Platform. Not in CISA KEV. EPSS 0.4% (higher than 37.2% of CVEs). CVSS 9.4 CRITICAL. Priority 14.7 of 100.","summary":"ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform","date_published":"2026-10-29T00:00:00.000Z","date_modified":"2026-10-30T17:44:35.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.7,"kev":null,"epss":{"score":0.00429,"percentile":0.37194},"cvss":{"score":9.4,"severity":"CRITICAL","version":"4.0"},"vendor":"ServiceNow","product":"ServiceNow AI Platform","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-6875","url":"https://patchfirst.co/cve/CVE-2026-6875/","title":"CVE-2026-6875: Sandbox Escape in ServiceNow AI Platform","content_text":"ServiceNow · ServiceNow AI Platform. Not in CISA KEV. EPSS 1.4% (higher than 72.9% of CVEs). CVSS 9.5 CRITICAL. Public exploit code exists. Named in 1 threat report. Priority 71.7 of 100.","summary":"Sandbox Escape in ServiceNow AI Platform","date_published":"2026-07-13T00:00:00.000Z","date_modified":"2026-08-27T16:06:33.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":71.7,"kev":null,"epss":{"score":0.01426,"percentile":0.72913},"cvss":{"score":9.5,"severity":"CRITICAL","version":"4.0"},"vendor":"ServiceNow","product":"ServiceNow AI Platform","techniqueIds":[],"reportCount":1,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-4879#kev","url":"https://patchfirst.co/cve/CVE-2024-4879/","title":"[KEV] CVE-2024-4879: ServiceNow Improper Input Validation Vulnerability","content_text":"ServiceNow · Utah, Vancouver, and Washington DC Now Platform. In CISA KEV since 2024-07-29. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1190 Exploit Public-Facing Application. Priority 69.9 of 100.","summary":"ServiceNow Improper Input Validation Vulnerability","date_published":"2024-07-29T00:00:00.000Z","date_modified":"2026-06-17T08:03:05.000Z","tags":["kev","public-exploit","T1059","T1005","T1190"],"_patchfirst":{"reason":"kev","priority":69.9,"kev":{"dateAdded":"2024-07-29","ransomware":false},"epss":{"score":0.99976,"percentile":0.99979},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"ServiceNow","product":"Utah, Vancouver, and Washington DC Now Platform","techniqueIds":["T1059","T1005","T1190"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-5217#kev","url":"https://patchfirst.co/cve/CVE-2024-5217/","title":"[KEV] CVE-2024-5217: ServiceNow Incomplete List of Disallowed Inputs Vulnerability","content_text":"ServiceNow · Utah, Vancouver, and Washington DC Now Platform. In CISA KEV since 2024-07-29. ENISA EUVD lists it as exploited. EPSS 99.6% (higher than 99.95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System. Priority 69.8 of 100.","summary":"ServiceNow Incomplete List of Disallowed Inputs Vulnerability","date_published":"2024-07-29T00:00:00.000Z","date_modified":"2026-06-17T08:15:25.000Z","tags":["kev","public-exploit","T1059","T1005"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2024-07-29","ransomware":false},"epss":{"score":0.99628,"percentile":0.99949},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"ServiceNow","product":"Utah, Vancouver, and Washington DC Now Platform","techniqueIds":["T1059","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-5178","url":"https://patchfirst.co/cve/CVE-2024-5178/","title":"CVE-2024-5178: Incomplete Input Validation in SecurelyAccess API","content_text":"ServiceNow · Now Platform. Not in CISA KEV. EPSS 33.6% (higher than 98.4% of CVEs). CVSS 4.9 MEDIUM. Priority 59.9 of 100.","summary":"Incomplete Input Validation in SecurelyAccess API","date_published":"2024-07-10T00:00:00.000Z","date_modified":"2024-08-01T21:03:11.000Z","tags":[],"_patchfirst":{"reason":"published","priority":59.9,"kev":null,"epss":{"score":0.33593,"percentile":0.9838},"cvss":{"score":4.9,"severity":"MEDIUM","version":"3.1"},"vendor":"ServiceNow","product":"Now Platform","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}