VULNERABILITY INTELLIGENCE
CVE-2026-2031
EPSS probability0.53%
CISA KEVNot currently listed
Published2026-05-15
Last modified2026-10-26
Description
An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticated attacker to disclose sensitive internal information and execute arbitrary code using specially crafted HTTP requests to inadvertently exposed internal API endpoints.
Weakness classification
- f45cbf4e-4146-4068-b7e1-655ffc2c548c: CWE-862