Netskope Threat Labs

ET WEB_SPECIFIC_APPS ServiceNow BodySnatcher Virtual Agent API Authentication Bypass (CVE-2025-12420)

IPS-NPA

1 SID: 2067121

First seen
May 2026
Last seen
May 2026

Detects exploitation attempts against ServiceNow BodySnatcher Virtual Agent API Authentication Bypass, tracked as CVE-2025-12420.