Skip to content
fr Sign in
9.2 Critical

CVE-2026-2264 A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform…

Description

A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For successful exploitation, an administrator must initially establish an insecure configuration of the API proxy.

Affected products and versions

Product Affected versions Fixed in
Apigee-X 1.16 earliest → < 1.16.1 1.16.1
Apigee-X 1.15 earliest → < 1.15.2 1.15.2
Apigee-X 1.14 earliest → < 1.14.4 1.14.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Apigee-X

The 2 CVEs of Apigee-X →
CVE-2025-13292 A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apigee Analytics (AX) data… 7.6 High
Track this CVE