CVE-2025-12420 2

Vulnerability (CVE)

Service Now Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation

ServiceNow disclosed a now-patched critical flaw, CVE-2025-12420, with a CVSS score of 9.3, that could let an unauthenticated user impersonate another user and perform actions as that user; ServiceNow deployed a security update to most hosted instances on...

Vulnerabilities & Patching

⚡ Weekly Recap: Fortinet Exploits, Red Line Clipjack, NTLM Crack, Copilot Attack & More

Cyber Risks The Hacker News

A critical Fortinet FortiSIEM flaw tracked as CVE-2025-64155, with a CVSS score of 9.4, is under active exploitation in the wild and allows an unauthenticated attacker to execute unauthorized code or commands via crafted TCP requests. Horizon3.ai's...

Vulnerabilities & Patching