CVE-2026-74820: Vulnerability in ServiceNow ServiceNow AI Platform
Description
A critical SQL injection vulnerability (CVE-2026-74820) was identified and remediated in the ServiceNow AI Platform. This flaw could allow an unauthenticated attacker to execute arbitrary SQL commands on the underlying database, potentially accessing or modifying data beyond intended permissions. ServiceNow has deployed security updates to hosted instances and provided patches to partners and self-hosted customers. There are no known reports of active exploitation. Customers are advised to apply updates promptly to mitigate risk.
CVSS v4.0
Score 10.0critical
Affected software
ServiceNow
ServiceNow AI Platform
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-74820 is a SQL injection vulnerability in the ServiceNow AI Platform that enables unauthenticated users, under certain conditions, to execute arbitrary SQL statements against the instance database. This could lead to unauthorized data access or modification. ServiceNow has addressed this vulnerability by deploying security updates to its cloud-hosted instances and distributing patches to partners and self-hosted customers. The vulnerability carries a CVSS 4.0 base score of 10.0, indicating critical severity. No active exploitation has been reported to date.
Potential Impact
Successful exploitation could allow an unauthenticated attacker to execute arbitrary SQL queries on the database, resulting in unauthorized access to or modification of sensitive instance data. This compromises confidentiality, integrity, and availability of the affected ServiceNow AI Platform instances.
Mitigation Recommendations
ServiceNow has deployed security updates to all hosted cloud instances and provided patches to partners and self-hosted customers. Customers should promptly apply these updates or upgrade to a patched release to remediate the vulnerability. Since this is a cloud service, the vendor manages remediation for hosted instances. There are no known active exploits at this time.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- SN
- Date Reserved
- 2026-08-17T00:31:50.549Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Is Cloud Service
- true
Threat ID: 6a909cfcacd9273b49b2d312
Added to database: 08/27/2026, 20:24:28 UTC
Last enriched: 09/08/2026, 10:37:35 UTC
Last updated: 10/11/2026, 06:48:18 UTC
Views: 183
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.