Tag

#patch-management

2 stories tagged patch-management.

Timeline of ServiceNow CVE-2026-6875 from April 1 discovery to July 18 active exploitation, showing a 5-day gap between July 13 patch release and first attacks. CVSS 9.5.

ServiceNow CVE-2026-6875 exploited: patch your instances now

ServiceNow CVE-2026-6875 is a CVSS 9.5 pre-auth sandbox escape RCE in the AI Platform, now actively exploited. Patch self-hosted instances immediately.

Lars Cornelissen · Jul 21, 2026

Splunk CVE-2026-20253 timeline showing day 0 disclosure on June 10, day 2 public technical write-up on June 12, day 8 CISA KEV addition on June 18, and day 11 federal due date on June 21.

Cyber security

Splunk CVE-2026-20253 puts SIEMs on a 72-hour clock

Splunk CVE-2026-20253 is an actively exploited critical flaw. Patch exposed Enterprise 10.0 and 10.2 nodes by June 21.

Lars Cornelissen · Jun 21, 2026