{"uuid": "0585b5d8-602e-4f22-8137-e0c31c30b989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18885", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mu7xfdffmf2p", "content": "ServiceNow\u2019s CVSS 10.0 trio shows how one platform patch cycle becomes everyone\u2019s third-party risk\u00a0problem\n\nFour flaws hand just been disclosed in ServiceNow's AI Platform, three of them scored a maximum CVSS 10.0: a code injection bug in the GraphQL Composite Data API (CVE-2026-18885), a privilege\u2026", "creation_timestamp": "2026-08-29T13:13:43.562367Z"}