Security News
긴급도 4/100 심각도 미평가 · 높음 악용확률 49.0% CWE-94

CVE-2026-6876

Qualys 위협 인텔 · 심각도 5/5 · QID 735247 · CGI
측면이동 쉬운 악용 대량 데이터 유출 서비스 거부
  • CVSS Temporal 8.8 (현재 위협 반영)
  • 익스플로잇 성숙도: PoC (2/4)
  • 공격 위치: 원격
  • 패치: 가능
  • PCI-DSS 관련
ServiceNow has remediated a sandbox escape security issue that was identified in the Now Platform. This security issue could allow an unauthenticated user to execute arbitrary code within the Now Platform, potentially leading to more access to the Now Platform than intended.  





ServiceNow deployed a security update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. 



We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.

NVD 상세 ↗   GitHub Advisory ↗   참고 링크 ↗

이 취약점을 다룬 기사 (2)

← 취약점 목록