Beveiligingsadvies

CVE-2026-2264

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-26 16:30:45
Laatst bijgewerkt 2026-05-26 19:20:49
Toegewezen door GoogleCloud
CVSS-score 9.2
Status PUBLISHED

Beschrijving

A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For successful exploitation, an administrator must initially establish an insecure configuration of the API proxy.