9.4
Critical
CVE-2026-15587 Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows…
Description
Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header. This vulnerability was patched with version 6.3.85, and no customer action is needed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Google SecOps (Chronicle SOAR) 6.3 | earliest → < 6.3.85 | 6.3.85 |
References
- docs.cloud.google.com docs.cloud.google.com
Timeline
- Published
- Last modified