Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Executio

Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused. [...]

<h2> TL;DR </h2> <ul> <li> <strong>what:</strong> Threat actors are actively exploiting CVE-2026-6875, a critical (CVSS 9.5) sandbox escape in the ServiceNow AI Platform that

ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code injection, SQL injection, and privilege escalation

Fortinet has released security patches for two critical vulnerabilities in FortiSandbox and FortiAuthenticator that could enable attackers to run commands or arbitrary code. [...]

Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed

<h2> 1. Basic Information </h2> <ul> <li> <strong>Article Name:</strong> CVE-2026-105740 Exploitation Observed — langflow</li> <li> <strong>Source:</strong> Previdian</li> <li>

Palo Alto Networks warned customers today that a critical-severity unpatched vulnerability in the PAN-OS User-ID Authentication Portal is being exploited in attacks. [...]

Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active exploitation in the wild. The vulnerability, tracked