ServiceNow security advisory (AV26-857)
Brief
Serial number: AV26-857 Date: August 28, 2026
As of August 27, 2026, ServiceNow is affected by vulnerabilities in the following products:
- Xanadu
- Versions prior to Patch 11 Hot Fix 7a
- Yokohama
- Versions prior to Yokohama Patch 12 Hot Fix 3b
- Versions prior to Yokohama Patch 13 Hot Fix 4
- Zurich
- Multiple versions
- Australia
- Multiple versions
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
- August 2026 CVE Advisory Notification
- ServiceNow security advisories
ServiceNow security advisory (AV26-857) - Canadian Centre for Cyber Security