ServiceNow Patches Critical Security Flaws in AI Platform

ServiceNow has patched three critical vulnerabilities (CVE-2026-18885, CVE-2026-18886, CVE-2026-74820) in its AI Platform, all rated CVSS 10.0. These flaws, including code injection, access control, and SQL injection issues, could have allowed unauthenticated attackers to execute code, escalate privileges, or access and modify instance data. The patches mitigate significant security risks for users.