[Security Advisory] October 2026 CVE Advisory Notification ServiceNow Posture OCTOBER, 2026 Quick Summary What you need to know: On October 29, 2026, ServiceNow issued CVE-2026-103093, CVE-2026-103094, and CVE-2026-6877.Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.ServiceNow did not identify evidence of malicious exploitation related to these issues. The purpose of this article is to answer questions you may have about these issues and the security update. Background CVE-2026-103093– PRB2112567 Based on the CVSS v4.0 calculator, we have assessed the risk posed by the vulnerability addressed in CVE-2026-103093 to be critical. ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling further unintended access. CVE-2026-103094 - PRB2112601 Based on the CVSS v4.0 calculator, we have assessed the risk posed by the vulnerability addressed in CVE-2026-103094 to be high. ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could cause a user's plaintext password to be persisted in a system table, potentially exposing that password to a user who otherwise would not be entitled to view it. CVE-2026-6877 - PRB211261 Based on the CVSS v4.0 calculator, we have assessed the risk posed by the vulnerability addressed in CVE-2026-6877 to be medium. ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM – Task Plan Templates Store application. This vulnerability could enable an authenticated user with a specific role to create records in domains they do not have access to, potentially leading to unauthorized data creation across domain boundaries. Customers who have this application installed should confirm that they are using one of these remediated versions by navigating to now/app-manager in your instance and searching for SR - CSM - Task Plan Templates: 2.0.13.0.0 or later4.0.0 or later5.0.0 or later If this app is not installed in your instance, your instance is not affected and no further action is needed. Customer Action Required For CVE-2026-103093 (PRB2112567) and CVE-2026-103094 (PRB2112601), customers who participated in the ServiceNow September Patching Program received the appropriate updates, which are listed below: ServiceNow AI Platform Release Version Updated Yokohama Patch 13 Hotfix 5a W35 Zurich Patch 10 Hotfix 4b W38 Australia Patch 5 W38 In addition, the below versions also contain remediations for CVE-2026-103093 (PRB2112567) and CVE-2026-103094 (PRB2112601): ServiceNow AI Platform Release Version Updated Yokohama Patch 13 Hotfix 4a Zurich Patch 10 Hotfix 3b Australia Patch 5 If your instance release is one of the above versions, there is no action required as your instance has already had the appropriate remediations for all three CVEs applied. If you have more questions or need more details, please create a Support case with the subject "October 2026 Batched CVE Release". In regards to CVE-2026-6877 (PRB211261), customers who have this store application and are on 2.0.0 or lower are advised to upgrade to 3.0.0 or higher unless they are already planning to upgrade their instance a release that includes version 2.0.1. Version 2.0.1 cannot be installed manually and is installed only when a customer is on 2.0.0 and upgrades their instance to one of the below ServiceNow releases or a later version: Australia Patches 5, 6, 7, and 8 Australia Patch 2 Hot Fix 5a W32–W35. Please note that 3.0.0 is only available on Yokohama or higher. Customers using Xanadu or earlier family releases who have this application installed should upgrade to a supported family and install the applicable remediated Task Plan Templates version. Customers who cannot install a remediated version should contact ServiceNow Support for assistance with the subject "October 2026 CVE Batched CVE Release". Additional Resources October 2026 CVE Batch FAQ: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3228993Self-Hosted: October 2026 CVE Batch FAQ: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3228997http://cve.org/CVERecord?id=CVE-2026-103093http://cve.org/CVERecord?id=CVE-2026-103094http://cve.org/CVERecord?id=CVE-2026-6877 Change Log VersionPublishedSummary of Changes1.0October 29, 2026Initial publication