Latest / The Digital Warfare Podcast
Digital Warfare Podcast Daily Brief #133 July 20, 2026
Summary
A public proof of concept has been released for CVE-2026-6875, a critical ServiceNow sandbox escape vulnerability that may allow an unauthenticated attacker to execute code inside a vulnerable instance.
The flaw abuses application paths that pass attacker-controlled input into GlideRecord queries. By manipulating the gs.include function and global JavaScript objects, an attacker may escape the restricted scripting environment and reach a more privileged execution context.
A successful compromise could expose sensitive platform records, enable administrator account creation, support…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.