Serial number: AV26-693
Date: July 14, 2026
Updated: July 20, 2026
On July 13, 2026, ServiceNow published a security advisory to address a critical vulnerability in the following products:
- Brazil - versions prior to Brazil EA and Brazil GA
- Australia - versions prior to Australia Patch 2
- Zurich - versions prior to Zurich Patch 7b and Zurich Patch 9
- Yokohama - versions prior to Yokohama Patch 12 Hot Fix 1b and Yokohama Patch 13
Update 1
Open-source reporting indicates that CVE-2026-6875 is being exploited in the wild.
The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.