Attackers Exploit ServiceNow CVE-2026-6875 via Multiple Sandbox-Escape Routes

Attackers are exploiting CVE-2026-6875, a critical pre-authentication code-execution flaw in ServiceNow's AI Platform, via multiple sandbox-escape routes. Defused threat intelligence confirms active exploitation using a different gadget chain than the published proof-of-concept, meaning organisations relying on signature-based defences rather than patching remain vulnerable.

This Wire brief sits within Fusion42's coverage of Enterprise Software and Cybersecurity. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur reasons over.