9.4
Critique
CVE-2026-19759 An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions…
Description
An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions prior to 2026-06-17 on Google Cloud Platform allows an authenticated Google Cloud user to execute arbitrary internal RPCs from inside Google's production network under a privileged identity using an internal-only task type. This vulnerability was patched on 17 June 2026, and no customer action is needed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Application Integration 2026 | premières → < 2026-06-17 | 2026-06-17 |
Références
- docs.cloud.google.com docs.cloud.google.com
- docs.cloud.google.com docs.cloud.google.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Application Integration
Les 7 CVE de Application Integration →
CVE-2026-93327
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration…
9.4
Critique
CVE-2026-85298
An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google…
7.3
Élevée
CVE-2026-81375
A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to…
8.3
Élevée
CVE-2026-81867
A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration…
9.4
Critique