CRITICAL 9.3 NVD

CVE-2026-12710

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required.

References

https://cloud.google.com/application-integration/docs/release-notes#August_21_2026

Published: 2026-08-22 · Source: NVD · Feed updated: 2026-08-22

This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-08-22 via NVD.

Risk Timeline

CVE Disclosed2026-08-22 · -1 days ago

Remediation Resources

Official Advisory

cloud.google.com/application-integration/docs/release-notes#August_21_

vulnfeed aggregates 10961 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.