Security Advisory

CVE-2026-2031

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-15 15:38:24

Last updated 2026-05-15 16:11:44

Assigner GoogleCloud

CVSS score 10.0

State PUBLISHED

Description

An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticated attacker to disclose sensitive internal information and execute arbitrary code using specially crafted HTTP requests to inadvertently exposed internal API endpoints.

← Browse all CVEs View on cve.org ↗