CVE-2026-85298highCWE-863

CVE-2026-85298: falha de alta gravidade em Google Cloud Application Integration

Improper Authorization in Google Cloud Application Integration Leads to Privilege Escalation

Publicada em

Seguir esta CVE+ Monitorar Application Integration

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.3epss 0.4%
An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project. This vulnerability was patched on 27 August 2026, and no customer action is needed.
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/U:Clear
Produtos afetados
Google Cloud · Application Integration
CVEs relacionadas — Google Cloud Application Integration

No mesmo produto, das mais perigosas para as menos.

CVE-2026-12710CRITICALMissing Authorization in Application Integration QueryEngineTaskEPSS 0.4%CVE-2026-93327CRITICALUnsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code ExecutionEPSS 0.4%CVE-2026-81867CRITICALDeserialization of Untrusted Data in Application Integration allows Remote Code ExecutionEPSS 0.4%CVE-2026-81375HIGHConfused Deputy in Application Integration allows Internal File ReadEPSS 0.3%CVE-2025-0982CRITICALSandbox Escape in Google Cloud Application Integration's JavaScript Task (Rhino Engine)EPSS 0.3%CVE-2026-19759CRITICALIncorrect Authorization in Application Integration allows Internal Stubby RPC ExecutionEPSS 0.2%