CVE-2026-6875: ServiceNow Sandbox Escape Leads to Pre-Auth RCE in AI Platform
Critical unauthenticated RCE vulnerability CVE-2026-6875 hits ServiceNow via a GlideRecord sandbox escape. Attackers are already exploiting unpatched instances.
Real-time vulnerability analysis, threat intelligence, and expert insights to protect your web, API and AI agents from emerging attacks.
Critical unauthenticated RCE vulnerability CVE-2026-6875 hits ServiceNow via a GlideRecord sandbox escape. Attackers are already exploiting unpatched instances.
WP2Shell chains CVE-2026-60137 and CVE-2026-63030 for unauthenticated RCE on WordPress Core. Patch to 6.8.6, 6.9.5, or 7.0.2 now,…
Microsoft released patches for over 570 vulnerabilities in its July 2026 Patch Tuesday, the largest security update in…
CVE-2026-48282 is a critical ColdFusion RDS path traversal vulnerability under active exploitation. Learn the risks, IOCs, and how…
Run 6 quick checks to find exposed API endpoints, broken auth, and data leaks before attackers do. See…
Langflow CVE-2026-33017 is under active exploitation. Attackers deploy Monero miners via unauthenticated RCE. Get IOCs, patch steps, and…
Oracle E-Business Suite (EBS) sits at the center of finance, procurement, and payment operations for many large enterprises.…
CVE-2026-42271 enables unauthenticated RCE in LiteLLM when chained with CVE-2026-48710. Learn wha is at risk and how to…
Run a 10-minute WordPress security self-check to spot version leaks, open endpoints, stale plugins, and missing headers before…
Oracle has disclosed CVE-2026-35273, a critical vulnerability in PeopleSoft Enterprise PeopleTools that has already been exploited by threat…
CERT-In's AI security blueprint sets a 12-hour window for internet-facing vulnerabilities. See what it requires and how AppTrana…
CVE-2026-45247 is a critical PHP deserialization vulnerability in Mirasvit Cache Warmer allowing unauthenticated RCE. Learn the impact and…