24h | 7d | 30d

CVE-2026-55040

Overview

  • Microsoft
  • Microsoft SharePoint Enterprise Server 2016
14 Jul 2026
Published
17 Sep 2026
Updated
CVSS v3.1
CRITICAL (9.1)
EPSS
17.54%
KEV

Description

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

Statistics

  • 1 Post
Last activity: 12 hours ago

Bluesky

Profile picture fallback
boredchilada @cyfar.ca
~Cybergcca~ WebPros flaws enable root RCE; Microsoft SharePoint CVEs are exploited in the wild. - IOCs: CVE-2026-65660, CVE-2026-63520, CVE-2026-55040 - #Microsoft #ThreatIntel #Vulnerabilities
  • 0
  • 0
  • 0
  • 12h ago

CVE-2026-63520

Overview

  • Microsoft
  • Microsoft SharePoint Enterprise Server 2016
11 Aug 2026
Published
24 Sep 2026
Updated
CVSS v3.1
HIGH (8.1)
EPSS
0.96%
KEV

Description

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Statistics

  • 1 Post
Last activity: 12 hours ago

Bluesky

Profile picture fallback
boredchilada @cyfar.ca
~Cybergcca~ WebPros flaws enable root RCE; Microsoft SharePoint CVEs are exploited in the wild. - IOCs: CVE-2026-65660, CVE-2026-63520, CVE-2026-55040 - #Microsoft #ThreatIntel #Vulnerabilities
  • 0
  • 0
  • 0
  • 12h ago

CVE-2026-86858

Overview

  • ServiceNow
  • ServiceNow AI Platform
24 Sep 2026
Published
24 Sep 2026
Updated
CVSS v4.0
HIGH (8.7)
EPSS
Pending
KEV

Description

ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue could enable an unauthenticated user, in certain circumstances, to create, modify, or delete instance data beyond what was intended. In August 2026, ServiceNow deployed a security update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 7 hours ago

Fediverse

Profile picture fallback
:rainbowCrow: @cR0w

Hack and patch more ServiceNow shit.

support.servicenow.com/kb?id=k

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

  • 1
  • 1
  • 0
  • 7h ago

CVE-2026-86857

Overview

  • ServiceNow
  • ServiceNow AI Platform
24 Sep 2026
Published
24 Sep 2026
Updated
CVSS v4.0
HIGH (8.4)
EPSS
Pending
KEV

Description

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an authenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access, potentially enabling further unintended access. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 7 hours ago

Fediverse

Profile picture fallback
:rainbowCrow: @cR0w

Hack and patch more ServiceNow shit.

support.servicenow.com/kb?id=k

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

  • 1
  • 1
  • 0
  • 7h ago

CVE-2026-86859

Overview

  • ServiceNow
  • ServiceNow AI Platform
24 Sep 2026
Published
24 Sep 2026
Updated
CVSS v4.0
HIGH (8.7)
EPSS
Pending
KEV

Description

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access, potentially enabling further unintended access. ServiceNow deployed a security update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 7 hours ago

Fediverse

Profile picture fallback
:rainbowCrow: @cR0w

Hack and patch more ServiceNow shit.

support.servicenow.com/kb?id=k

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

  • 1
  • 1
  • 0
  • 7h ago
Showing 61 to 65 of 65 CVEs