ServiceNow: Unauthorized API Access to Customer Data via Misconfiguration11. June 2026CybersecurityShare on:A misconfigured API endpoint in ServiceNow allowed unauthenticated access to customer tables — remediation was delayed by more than six weeks after the bug bounty report. Share on: