ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances

ServiceNow patched a security flaw that allowed unauthenticated users to gain unauthorized access to customer instances.

• •The vulnerability was patched on June 5, 2026 after unknown threat actors exploited it
• •An unauthenticated user in certain circumstances could obtain greater access than intended to ServiceNow instances
• •The security update modifies endpoint configuration to restrict access to authenticated users only
• •The flaw affected customers on Australia platform release or those with specific configuration changes on prior releases
• •ServiceNow detected anomalous activity and confirmed successful exploitation targeting a subset of customers

This summary was automatically generated by AI based on the original article and may not be fully accurate.