9.4
Critique
CVE-2026-81867 A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration…
Description
A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud Platform allows an authenticated user with standard permissions to run arbitrary code on the shared production servers using a specially crafted script bypassing param guards. This vulnerability was patched on 28 June 2026, and no customer action is needed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Application Integration 2026 | premières → < 2026-06-28 | 2026-06-28 |
Références
- docs.cloud.google.com docs.cloud.google.com
- docs.cloud.google.com docs.cloud.google.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Application Integration
Les 7 CVE de Application Integration →
CVE-2026-93327
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration…
9.4
Critique
CVE-2026-85298
An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google…
7.3
Élevée
CVE-2026-81375
A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to…
8.3
Élevée
CVE-2026-19759
An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions…
9.4
Critique