Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

ServiceNow security patch release for CVE-2026-6875

Security Patch Release
First reported
Last updated
Happening score
H score 47
2 unique sources, 2 articles

Summary

Hide ▲

ServiceNow released CVE-2026-6875 security updates for the ServiceNow AI Platform, covering hosted and self-hosted instances. The patch addresses a pre-auth sandbox-escape RCE that can let unauthenticated threat actors execute code remotely. Customers who have not upgraded are being told to move to a patched release as soon as possible.

Related Happenings

WordPress core pre-auth RCE patch bundle (6.9.5, 7.0.2)

Security Patch Release
H score66 First: 18.07.2026 00:20 Last: 18.07.2026 00:20 Sources 1

About this happening: WordPress Core patched a pre-auth RCE on July 17, 2026 with 6.9.5 and 7.0.2, and the release also enabled forced automatic updates for supported installati...

Latest development: 21.07.2026 19:41

WordPress sites saw wp2shell probing at 23:29 UTC on July 17, followed 13 minutes later by a clear SQL injection attempt; Wiz also described attacks that mass-scanned vulnerable installations, abused plugin upload functionality, installed PHP webshells, and targeted wp-config through admin-ajax.php.

Open Happening

RabbitMQ maintainers security patch release for CVE-2026-57219

Security Patch Release
H score29 First: 14.07.2026 16:48 Last: 14.07.2026 16:48 Sources 1

About this happening: RabbitMQ maintainers released fixed versions for multiple supported release lines, closing two access-control flaws that could expose OAuth client secrets and cross-te...

Open Happening

Dify security patch release for CVE-2026-41947

Security Patch Release
H score34 First: 22.06.2026 19:13 Last: 22.06.2026 19:13 Sources 1

About this happening: Dify shipped version 1.14.2 to fix most of the DifyTap vulnerabilities, closing cross-tenant paths that could expose AI chats, uploaded files, and internal API...

Open Happening

SimpleHelp security update for CVE-2026-48558

Security Patch Release
H score65 First: 15.06.2026 23:06 Last: 15.06.2026 23:06 Sources 1

About this happening: SimpleHelp released 5.5.16 and 6.0 RC2 on June 9 to fix CVE-2026-48558, a critical OIDC authentication flaw in SimpleHelp remote management software th...

Open Happening

TrendAI Trend Micro’s enterprise business security patch release for CVE-2026-34926

Security Patch Release
H score45 First: 22.05.2026 11:19 Last: 22.05.2026 11:19 Sources 1

About this happening: TrendAI released Apex One security updates after confirming a zero-day had been exploited in the wild, leaving on-premises installations at risk until patched....

Open Happening

Timeline

  1. 20.07.2026 12:29 3 articles · 13d ago

    ServiceNow releases CVE-2026-6875 security updates for hosted and self-hosted instances

    Mitigation Patch Update

    ServiceNow addressed the CVE-2026-6875 flaw across hosted instances and released security updates for self-hosted instances on July 13, telling customers who had not already done so to upgrade to a patched release as soon as possible.

    Show sources
    Open in new tab