Beveiligingsadvies

CVE-2026-8934

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-22 15:20:05

Laatst bijgewerkt 2026-06-22 16:29:08

Toegewezen door GoogleCloud

CVSS-score 6.9

Status PUBLISHED

Beschrijving

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched on 7 April 2026, and no customer action is needed.

← Alle CVE's bekijken Bekijk op cve.org ↗