{"data":{"id":"037e78d4-93cf-4333-9b3c-30adfe6a0554","title":"CVE-2026-18885: ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This…","summary":"ServiceNow has remediated CVE-2026-18885, a code injection vulnerability in the ServiceNow AI platform. In certain circumstances, an unauthenticated user could execute arbitrary code on the platform and access or modify instance data beyond what was intended. ServiceNow says it is not aware of malicious exploitation against its instances.","solution":"ServiceNow deployed a security update to hosted instances and provided it to partners and self-hosted customers. Customers are advised to promptly apply appropriate updates or upgrade to a patched release if they have not already done so.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-18885","publishedAt":"2026-08-27T20:17:03.870Z","cveId":"CVE-2026-18885","cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["ServiceNow AI platform"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"ServiceNow AI platform code injection allowing unauthenticated code execution","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.07241,"epssCheckedAt":"2026-11-04T18:09:13.116Z","kevDateAdded":null,"advisoryAliases":["GHSA-pc3p-j9w8-jrpg"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T18:09:00.794Z","patchAvailable":null,"disclosureDate":"2026-08-27T20:17:03.870Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[]}}