[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-86860":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-24T17:02:55.436Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":229,"aliases":230,"duplicate_of":9,"upstream":231,"downstream":232,"duplicates":233,"related":234,"reserved_at":9,"published_at":235,"modified_at":236,"state":237,"summary":238,"references_raw":245,"kevs":251,"epss":9,"epss_history":252,"metrics":253,"affected":260},"CVE-2026-86860","ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting in privilege escalation.\n\n\n\n\n\nServiceNow deployed a security update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-862","Missing Authorization","The product does not perform an authorization check when an actor attempts to access a resource or perform an action.","weakness","Incomplete","Class","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-665","Exploitation of Thunderbolt Protection Flaws",[24,61,101],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1211","Exploitation for Stealth",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0005","Stealth",[35,40,45,49,53,57],{"id":36,"name":37,"tactic":38},"D3-PSEP","Process Segment Execution Prevention",{"name":39},"Harden",{"id":41,"name":42,"tactic":43},"D3-MBT","Memory Boundary Tracking",{"name":44},"Detect",{"id":46,"name":47,"tactic":48},"D3-PCSV","Process Code Segment Verification",{"name":44},{"id":50,"name":51,"tactic":52},"D3-SFCV","Stack Frame Canary Validation",{"name":39},{"id":54,"name":55,"tactic":56},"D3-SSC","Shadow Stack Comparisons",{"name":44},{"id":58,"name":59,"tactic":60},"D3-SAOR","Segment Address Offset Randomization",{"name":39},{"id":62,"name":63,"tactics":64,"countermeasures":70},"T1542.002","Component Firmware",[65,66,67],{"id":29,"name":30},{"id":32,"name":33},{"id":68,"name":69},"TA0110","Persistence",[71,75,79,83,87,92,97],{"id":72,"name":73,"tactic":74},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":44},{"id":76,"name":77,"tactic":78},"D3-FV","Firmware Verification",{"name":44},{"id":80,"name":81,"tactic":82},"D3-FBA","Firmware Behavior Analysis",{"name":44},{"id":84,"name":85,"tactic":86},"D3-SU","Software Update",{"name":39},{"id":88,"name":89,"tactic":90},"D3-SWI","Software Inventory",{"name":91},"Model",{"id":93,"name":94,"tactic":95},"D3-RS","Restore Software",{"name":96},"Restore",{"id":98,"name":99,"tactic":100},"D3-AVE","Asset Vulnerability Enumeration",{"name":91},{"id":102,"name":103,"tactics":104,"countermeasures":113},"T1556","Modify Authentication Process",[105,106,109,110],{"id":29,"name":30},{"id":107,"name":108},"TA0112","Defense Impairment",{"id":68,"name":69},{"id":111,"name":112},"TA0031","Credential Access",[114,119,123,128,132,136,140,144,148,152,156,160,164,168,173,177,181,185,189,193,197,201,205,209,213,217,221,225],{"id":115,"name":116,"tactic":117},"D3-LFP","Local File Permissions",{"name":118},"Isolate",{"id":120,"name":121,"tactic":122},"D3-HBPI","Hardware-based Process Isolation",{"name":118},{"id":124,"name":125,"tactic":126},"D3-FEV","File Eviction",{"name":127},"Evict",{"id":129,"name":130,"tactic":131},"D3-HS","Host Shutdown",{"name":127},{"id":133,"name":134,"tactic":135},"D3-PSMD","Process Self-Modification Detection",{"name":44},{"id":137,"name":138,"tactic":139},"D3-CQ","Content Quarantine",{"name":118},{"id":141,"name":142,"tactic":143},"D3-ABPI","Application-based Process Isolation",{"name":118},{"id":145,"name":146,"tactic":147},"D3-SFA","System File Analysis",{"name":44},{"id":149,"name":150,"tactic":151},"D3-PT","Process Termination",{"name":127},{"id":153,"name":154,"tactic":155},"D3-SCF","System Call Filtering",{"name":118},{"id":157,"name":158,"tactic":159},"D3-AM","Access Modeling",{"name":91},{"id":161,"name":162,"tactic":163},"D3-RC","Restore Configuration",{"name":96},{"id":165,"name":166,"tactic":167},"D3-FE","File Encryption",{"name":39},{"id":169,"name":170,"tactic":171},"D3-DF","Decoy File",{"name":172},"Deceive",{"id":174,"name":175,"tactic":176},"D3-FIM","File Integrity Monitoring",{"name":44},{"id":178,"name":179,"tactic":180},"D3-CF","Content Filtering",{"name":118},{"id":182,"name":183,"tactic":184},"D3-FA","File Analysis",{"name":44},{"id":186,"name":187,"tactic":188},"D3-WSAM","Web Session Access Mediation",{"name":118},{"id":190,"name":191,"tactic":192},"D3-CI","Configuration Inventory",{"name":91},{"id":194,"name":195,"tactic":196},"D3-RF","Restore File",{"name":96},{"id":198,"name":199,"tactic":200},"D3-PSA","Process Spawn Analysis",{"name":44},{"id":202,"name":203,"tactic":204},"D3-PLA","Process Lineage Analysis",{"name":44},{"id":206,"name":207,"tactic":208},"D3-RFAM","Remote File Access Mediation",{"name":118},{"id":210,"name":211,"tactic":212},"D3-CM","Content Modification",{"name":118},{"id":214,"name":215,"tactic":216},"D3-NTPM","Network Traffic Policy Mapping",{"name":91},{"id":218,"name":219,"tactic":220},"D3-KBPI","Kernel-based Process Isolation",{"name":118},{"id":222,"name":223,"tactic":224},"D3-PS","Process Suspension",{"name":127},{"id":226,"name":227,"tactic":228},"D3-HR","Host Reboot",{"name":127},[],[],[],[],[],[],"2026-09-24T18:56:54.876Z","2026-09-24T19:26:56.070Z","Awaiting Analysis",{"cisa_kev":239,"cisa_ransomware":239,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":240,"severity_score":241,"severity_version":242,"severity_source":243,"severity_vector":244,"severity_status":237},false,"critical",9.3,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N",[246],{"url":247,"sources":248,"tags":250},"https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623",[243,249],"nvd",[],[],[],[254,257],{"source":243,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":255},{"baseScore":241,"baseSeverity":256,"vectorString":244,"impactScore":9,"exploitabilityScore":9},"CRITICAL",{"source":249,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":258},{"baseScore":241,"baseSeverity":256,"vectorString":259,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[261],{"ecosystem":9,"name":262,"vendor":263,"product":264,"cpe_part":265,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":266},"ServiceNow AI Platform","servicenow","servicenow ai platform","a",[267,272,275,278,281,284,287],{"version":268,"is_range":269,"range_type":243,"version_start":9,"version_start_type":9,"version_end":270,"version_end_type":271,"fixed_in":9},"\u003C Yokohama Patch 13 Hot Fix 5a",true,"Yokohama Patch 13 Hot Fix 5a","excluding",{"version":273,"is_range":269,"range_type":243,"version_start":9,"version_start_type":9,"version_end":274,"version_end_type":271,"fixed_in":9},"\u003C Zurich Patch 10 Hot Fix 3b","Zurich Patch 10 Hot Fix 3b",{"version":276,"is_range":269,"range_type":243,"version_start":9,"version_start_type":9,"version_end":277,"version_end_type":271,"fixed_in":9},"\u003C Zurich Patch 10 Hot Fix 4a W32","Zurich Patch 10 Hot Fix 4a W32",{"version":279,"is_range":269,"range_type":243,"version_start":9,"version_start_type":9,"version_end":280,"version_end_type":271,"fixed_in":9},"\u003C Zurich Patch 11 Hot Fix 3","Zurich Patch 11 Hot Fix 3",{"version":282,"is_range":269,"range_type":243,"version_start":9,"version_start_type":9,"version_end":283,"version_end_type":271,"fixed_in":9},"\u003C Australia Patch 2 Hot Fix 4b W32","Australia Patch 2 Hot Fix 4b W32",{"version":285,"is_range":269,"range_type":243,"version_start":9,"version_start_type":9,"version_end":286,"version_end_type":271,"fixed_in":9},"\u003C Australia Patch 4 Hot Fix 3","Australia Patch 4 Hot Fix 3",{"version":288,"is_range":269,"range_type":243,"version_start":9,"version_start_type":9,"version_end":289,"version_end_type":271,"fixed_in":9},"\u003C Australia Patch 5","Australia Patch 5"]