According to SecurityWeek, Rockwell Automation has patched four high-severity vulnerabilities in its Arena Simulation software that could allow an attacker to execute arbitrary code on affected systems. Arena Simulation is a discrete-event simulation software widely used by industrial organizations to model and test complex operational workflows. Exploitation of these vulnerabilities requires user interaction, as an attacker must convince a user to open a malicious file. While there is currently no evidence of these vulnerabilities being exploited in the wild, their existence is concerning given Arena's extensive use among global supply chain companies and hospitals.
Additionally, The Hacker News reported a critical security flaw in the ServiceNow AI platform, identified as CVE-2026-6875, which allows unauthenticated users to execute arbitrary code. ServiceNow has released patches to address this flaw and is enhancing restrictions on the types of code that can run in sandbox environments. Although ServiceNow stated that no exploitation has been observed to date, customers using self-hosted versions are advised to apply the patches promptly to mitigate potential threats.