ServiceNow patches five AI Platform flaws, including two critical data risks

Image: Primary

Published Friday, September 25, 2026 · 9:21 AM EDT

ServiceNow released fixes for five AI Platform vulnerabilities, including two critical flaws that could expose customer instance data to unauthenticated attackers. One, CVE-2026-13016, could permit database commands through SQL injection in certain circumstances. Another, CVE-2026-86860, could let an attacker extract data beyond intended access controls. Customers in ServiceNow's August Patching Program have already received fixes, while self-hosted customers need to verify their versions and update. ServiceNow said it has found no evidence that attackers have exploited the flaws in the wild.

Sources

cybersecuritynews.com

Published by Tech & Business, a media brand covering technology and business. This story was sourced from cybersecuritynews.com and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Capital Products

U.S. Series A funding reaches $42 billion as deal counts hold steady

U.S. startups raised $42 billion in Series A funding through October 2026, up roughly 60% year over year, while deal counts remained on pace with recent years, Crunchbase data shows.

Products

Ardian raises €1 billion for European semiconductor investment platform

Ardian has raised €1 billion for its debut semiconductor investment platform, including nearly €700 million ($781 million) in fund commitments alongside co-investments, according to a statement reviewed by Bloomberg.

Capital

Nominal raises $240 million at a $3 billion valuation

Nominal has raised $240 million at a $3 billion valuation, triple its valuation in a funding round earlier this year, Bloomberg reports. The startup builds software to make manufacturing more efficient.

Capital Products

Onodrim raises $300M to acquire European defence and industrial suppliers

Amsterdam-based Onodrim Industries has raised $300M in a round led by Lux Capital, valuing the defence group at $1.3bn, the company said Monday. Other investors include General Catalyst, Lakestar and Altimeter. The financing follows its €40M seed round in February.

Capital

SRTD Biotech raises €31.5 million for targeted RNA therapies

SRTD Biotech has completed an oversubscribed €31.5 million seed financing to develop RNA therapies designed to act selectively inside diseased cells. Mérieux Equity Partners led the round, with NRW.BANK and Boehringer Ingelheim Venture Fund joining as co-leads.

Ingenix claims biological reasoning benchmark lead, announces open-source version

Ingenix says its 9-billion-parameter Thalamus Reasoning model ranks first among 29 models on LongevityBench, which tests language models on cellular aging research.