{"data":{"id":"037e78d4-93cf-4333-9b3c-30adfe6a0554","title":"CVE-2026-18885: ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnera","summary":"ServiceNow fixed a code injection vulnerability (a flaw where attackers can insert and run harmful code) in its AI platform that could let unauthenticated users (people without login credentials) execute arbitrary code (run any commands they want) and access or change data they shouldn't have access to. ServiceNow has already deployed security updates to its hosted services and provided patches to partners and customers, with no known malicious attacks reported so far.","solution":"ServiceNow recommends that customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so. ServiceNow has deployed a security update to hosted instances and provided the update to partners and self-hosted customers.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-18885","publishedAt":"2026-08-27T20:17:03.870Z","cveId":"CVE-2026-18885","cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":[],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["ServiceNow","ServiceNow AI platform"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-27T20:17:03.870Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}