https://patchfirst.co/vendor/servicenow/New and newly exploited ServiceNow CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-103093/CVE-2026-103093Thu, 29 Oct 2026 00:00:00 GMTServiceNow · ServiceNow AI Platform. Not in CISA KEV. EPSS 0.4% (higher than 37.2% of CVEs). CVSS 9.4 CRITICAL. Priority 14.7 of 100.https://patchfirst.co/cve/CVE-2026-6875/CVE-2026-6875Mon, 13 Jul 2026 00:00:00 GMTServiceNow · ServiceNow AI Platform. Not in CISA KEV. EPSS 1.4% (higher than 72.9% of CVEs). CVSS 9.5 CRITICAL. Public exploit code exists. Named in 1 threat report. Priority 71.7 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-4879/CVE-2024-4879#kevMon, 29 Jul 2024 00:00:00 GMTServiceNow · Utah, Vancouver, and Washington DC Now Platform. In CISA KEV since 2024-07-29. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1190 Exploit Public-Facing Application. Priority 69.9 of 100.kevpublic-exploitT1059T1005T1190https://patchfirst.co/cve/CVE-2024-5217/CVE-2024-5217#kevMon, 29 Jul 2024 00:00:00 GMTServiceNow · Utah, Vancouver, and Washington DC Now Platform. In CISA KEV since 2024-07-29. ENISA EUVD lists it as exploited. EPSS 99.6% (higher than 99.95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System. Priority 69.8 of 100.kevpublic-exploitT1059T1005https://patchfirst.co/cve/CVE-2024-5178/CVE-2024-5178Wed, 10 Jul 2024 00:00:00 GMTServiceNow · Now Platform. Not in CISA KEV. EPSS 33.6% (higher than 98.4% of CVEs). CVSS 4.9 MEDIUM. Priority 59.9 of 100.