CVE-2026-2264
Vulnerability Description
A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens.
For successful exploitation, an administrator must initially establish an insecure configuration of the API proxy.
For successful exploitation, an administrator must initially establish an insecure configuration of the API proxy.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-918
Source
NVD
Discussion (0)
Add Comment
No comments yet. Be the first!