Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · GRC and integrated risk platforms · in CISA KEV

ServiceNow in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 2 entries for ServiceNow as of catalog version 2026.11.06, released November 6, 2026. The newest was added July 29, 2024, and the latest federal due date is August 19, 2024.

Updated

entries in the catalog
2
newest addition
July 29, 2024
latest federal due date
August 19, 2024
marked known ransomware use
0

Directory record

Website
www.servicenow.com
Categories
GRC and integrated risk platforms (primary), Vulnerability management, Incident response and forensics
Headquarters
HQ not established
Founded
Not established
Ownership
Ownership not established
Company record
ServiceNow on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “ServiceNow”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added July 29, 2024

    CVE-2024-5217 ServiceNow Incomplete List of Disallowed Inputs Vulnerability

    Utah, Vancouver, and Washington DC Now Platform

    Due August 19, 2024

  2. Added July 29, 2024

    CVE-2024-4879 ServiceNow Improper Input Validation Vulnerability

    Utah, Vancouver, and Washington DC Now Platform

    Due August 19, 2024

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

  1. Weekly archive · Dec 22 – Dec 28, 2025

    ServiceNow to Acquire Armis for $7.75 Billion

  2. Weekly archive · Jul 29 – Aug 4, 2024

    CISA Flags ServiceNow and Acronis Bugs as Actively Exploited

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for ServiceNow, published November 8, 2026