> TritonInfoSec News
Home / Jun 12, 2026 / Story
0
#8 The Hacker News general June 10, 2026 at 07:02 UTC

ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances

By [email protected] (The Hacker News)

AI Summary

ServiceNow patched a vulnerability on June 5, 2026 that allowed unauthenticated users to gain deeper unauthorized access to hosted customer instances — a flaw the company reportedly had known about since April 7. Threat actors actively exploited the vulnerability against some customers before the patch was applied, making this a confirmed zero-day exploitation window of approximately two months. Organizations using ServiceNow should audit access logs from April 7 onward for signs of unauthorized activity.

Read full article → https://thehackernews.com/2026/06/servicenow-flaw-…

Relevance score: 78.0/100

# More from June 12

  1. 1
    ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities The Hacker News
  2. 2
    CISA tells govt agencies to patch critical exploited flaws in 3 days BleepingComputer
  3. 3
    Max severity Ivanti Sentry vulnerability now exploited in attacks BleepingComputer
  4. 4
    Microsoft Patches Exploited Exchange Server Vulnerability SecurityWeek
  5. 5
    Russian national charged in connection with Void Blizzard espionage campaign CyberScoop
  6. 6
    GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks The Hacker News
  7. 7
    New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files The Hacker News
  8. 9
    China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance The Hacker News
  9. 10
    Coupang hit with record $409 million data breach fine in Korea BleepingComputer