Beveiligingsadvies

CVE-2026-2031

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-15 15:38:24
Laatst bijgewerkt 2026-05-15 16:11:44
Toegewezen door GoogleCloud
CVSS-score 10.0
Status PUBLISHED

Beschrijving

An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticated attacker to disclose sensitive internal information and execute arbitrary code using specially crafted HTTP requests to inadvertently exposed internal API endpoints.