Description
ServiceNow AI Platform 是 ServiceNow 面向企业提供的云端 IT 服务管理与人工智能平台，广泛用于 IT 服务管理、客户服务管理、运营管理和企业工作流自动化。该平台的 /assessment_thanks.do 接口存在预认证 JavaScript 沙箱逃逸代码执行漏洞，攻击者可在未认证状态下执行服务端代码并进一步控制平台及关联内部资源。
ServiceNow-AI-Platform /assessment_thanks.do 代码执行漏洞（CVE-2026-6875）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cloud.projectdiscovery.io/library/CVE-2026-6875
https://www.techtimes.com/articles/321052/20260720/attackers-exploit-servicenow-cve-2026-6875-via-multiple-sandbox-escape-routes.htm
https://www.helpnetsecurity.com/2026/07/20/servicenow-cve-2026-6875-exploited/
https://www.penligent.ai/hackinglabs/cve-2026-6875/
https://www.hivepro.com/threat-advisory/cve-2026-6875-servicenow-ai-platform-pre-auth-rce-exploited
https://www.indusface.com/blog/cve-2026-6875-servicenow-sandbox-escape-rce/
https://github.com/tc4dy/CVE-2026-6875-PoC-Exploit
https://slcyber.io/research-center/smashing-the-servicenow-sandbox-pre-authentication-rce/
https://www.cve.org/CVERecord?id=CVE-2026-6875
https://aiweekly.co/alerts/servicenow-ai-platform-rce-flaw-exploited-days-after-patch
https://www.ampcuscyber.com/shadowopsintel/servicenow-pre-auth-sandbox-escape-exploited-in-attacks/
https://hard2bit.com/en/blog/cve-2026-6875-servicenow-ai-platform-unauthenticated-rce/
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3137947
https://socradar.io/blog/cve-2026-6875-hits-servicenow-ai-platform/
https://www.bleepingcomputer.com/news/security/critical-servicenow-code-execution-flaw-now-exploited-in-attacks/
https://www.redlegg.com/blog/security-bulletin-servicenow-ai-platform-sandbox-escape-vulnerability
https://cybersecuritynews.com/servicenow-vulnerability-exploited/
https://www.securityweek.com/exploitation-of-servicenow-vulnerability-seen-days-after-disclosure/
https://www.rescana.com/post/active-exploitation-alert-critical-cve-2026-6875-remote-code-execution-vulnerability-in-servicenow-ai-platform
https://www.csoonline.com/article/4198993/servicenows-sandbox-escape-rce-hole-now-exploited-in-the-wild.html
https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/http/cves/2026/CVE-2026-6875.yaml
https://www.cyber.gc.ca/en/alerts-advisories/servicenow-security-advisory-av26-693
https://vulners.com/cve/CVE-2026-6875
https://www.tenable.com/cve/CVE-2026-6875