Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow
A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code. The post Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow appeared first on SecurityWeek .
AI Analysis
Technical Summary
ServiceNow addressed a critical remote code execution vulnerability (CVE-2026-6875, CVSS 9.5) in its AI platform that could be exploited by remote attackers without authentication. The company deployed security updates to hosted instances and provided patches to self-hosted customers and partners. Ivanti patched two vulnerabilities in its Xtraction tool, including an open redirect and a path traversal. Fortinet released fixes for 12 vulnerabilities across multiple products, including high-severity issues in FortiAuthenticator and FortiSandbox. None of these vulnerabilities are currently known to be exploited in the wild.
Potential Impact
The ServiceNow vulnerability allows remote attackers to execute arbitrary code on the AI platform without authentication, posing a critical risk to affected systems. Ivanti's vulnerabilities could lead to user redirection to malicious sites and unauthorized file access. Fortinet's vulnerabilities include potential information disclosure, unauthorized access, and code execution. No active exploitation has been reported for any of these vulnerabilities.
Mitigation Recommendations
ServiceNow has deployed security updates to its hosted AI platform instances and provided patches to self-hosted customers and partners. Users should apply these official patches promptly. Ivanti and Fortinet have released security updates for their affected products; applying these updates is recommended. There are no reports of exploitation in the wild, and the vulnerabilities are considered mitigated once patches are applied.
Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow
Description
A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code. The post Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow appeared first on SecurityWeek .
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
ServiceNow addressed a critical remote code execution vulnerability (CVE-2026-6875, CVSS 9.5) in its AI platform that could be exploited by remote attackers without authentication. The company deployed security updates to hosted instances and provided patches to self-hosted customers and partners. Ivanti patched two vulnerabilities in its Xtraction tool, including an open redirect and a path traversal. Fortinet released fixes for 12 vulnerabilities across multiple products, including high-severity issues in FortiAuthenticator and FortiSandbox. None of these vulnerabilities are currently known to be exploited in the wild.
Potential Impact
The ServiceNow vulnerability allows remote attackers to execute arbitrary code on the AI platform without authentication, posing a critical risk to affected systems. Ivanti's vulnerabilities could lead to user redirection to malicious sites and unauthorized file access. Fortinet's vulnerabilities include potential information disclosure, unauthorized access, and code execution. No active exploitation has been reported for any of these vulnerabilities.
Mitigation Recommendations
ServiceNow has deployed security updates to its hosted AI platform instances and provided patches to self-hosted customers and partners. Users should apply these official patches promptly. Ivanti and Fortinet have released security updates for their affected products; applying these updates is recommended. There are no reports of exploitation in the wild, and the vulnerabilities are considered mitigated once patches are applied.
Technical Details
- Article Source
- {"url":"https://www.securityweek.com/vulnerabilities-patched-by-fortinet-ivanti-servicenow/","fetched":true,"fetchedAt":"2026-07-15T11:17:33.606Z","wordCount":960}
Threat ID: 6a576c4d68715ace439b5f6f
Added to database: 07/15/2026, 11:17:33 UTC
Last enriched: 07/15/2026, 11:17:40 UTC
Last updated: 07/15/2026, 18:17:50 UTC
Views: 81
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.