https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:08:32.003162+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254639 EUVD-2026-254639 2026-10-02T10:08:32.078827+00:00 EUVD-2026-254639 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11450 fkie_cve-2025-11450 2026-10-02T10:08:32.078863+00:00

ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being executed within the browsers of ServiceNow users who click on a specially crafted link.

ServiceNow has addressed this vulnerability by deploying a relevant security update to the majority of hosted instances. Relevant security updates also have been provided to ServiceNow self-hosted customers, partners, and hosted customers with unique configurations. Further, the vulnerability is addressed in the listed patches and hot fixes. We recommend customers promptly apply appropriate updates or upgrade if they have not already done so.

 https://cve.radiocsirt.org/vuln/ghsa-2mg5-34rx-c3p8 GHSA-2mg5-34rx-c3p8 2026-10-02T10:08:32.078898+00:00

ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being executed within the browsers of ServiceNow users who click on a specially crafted link.

ServiceNow has addressed this vulnerability by deploying a relevant security update to the majority of hosted instances. Relevant security updates also have been provided to ServiceNow self-hosted customers, partners, and hosted customers with unique configurations. Further, the vulnerability is addressed in the listed patches and hot fixes. We recommend customers promptly apply appropriate updates or upgrade if they have not already done so.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2252 WID-SEC-W-2025-2252 — ServiceNow Now Platform (AI Platform): Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-02T10:08:32.078919+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ServiceNow Now Platform ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.