{"schema_version":1,"title":"Google Cloud vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in Google Cloud: 0 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-81375, was published on 28 September 2026. Nothing in the last four weeks, down from 1 vulnerability in the four before.","url":"https://junglewise.ai/threats/vendors/google-cloud","json_url":"https://junglewise.ai/threats/vendors/google-cloud.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/google-cloud","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":true,"counts":{"high":5,"all_time":7,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":1,"last_365_days":7},"latest":[{"cve":"CVE-2026-81375","slug":"cve-2026-81375-gcp-2026-066","title":"Google Cloud Application Integration Confused Deputy in Email Task","severity":"high","exploited":false,"published_at":"2026-09-28T11:16:47.86+00:00","url":"https://junglewise.ai/threats/cve-2026-81375-gcp-2026-066"},{"cve":"CVE-2026-15810","cvss":8.7,"slug":"cve-2026-15810-google-cloud-looker-xss-leading-to-administrative-account","title":"Google Cloud Looker XSS leading to administrative account takeover","severity":"high","exploited":false,"published_at":"2026-07-24T12:16:47.543+00:00","url":"https://junglewise.ai/threats/cve-2026-15810-google-cloud-looker-xss-leading-to-administrative-account"},{"cve":"CVE-2026-12715","cvss":8.5,"slug":"cve-2026-12715-google-cloud-firebase-studio-missing-authorization-in","title":"Google Cloud Firebase Studio missing authorization in GetSignedGcsUrl RPC","severity":"high","exploited":false,"published_at":"2026-07-17T16:17:13.047+00:00","url":"https://junglewise.ai/threats/cve-2026-12715-google-cloud-firebase-studio-missing-authorization-in"},{"cve":"CVE-2026-14934","cvss":9.4,"slug":"cve-2026-14934-google-cloud-bigquery-and-dataform-auth-bypass-in-repository","title":"Google Cloud BigQuery and Dataform auth bypass in repository creation","severity":"high","exploited":false,"published_at":"2026-07-13T11:16:26.47+00:00","url":"https://junglewise.ai/threats/cve-2026-14934-google-cloud-bigquery-and-dataform-auth-bypass-in-repository"},{"cve":"CVE-2026-12879","cvss":5.9,"slug":"cve-2026-12879-google-cloud-apigee-improper-input-validation-in-bigquery-dao","title":"Google Cloud Apigee improper input validation in BigQuery DAO","severity":"info","exploited":false,"published_at":"2026-07-09T14:16:27.84+00:00","url":"https://junglewise.ai/threats/cve-2026-12879-google-cloud-apigee-improper-input-validation-in-bigquery-dao"},{"cve":"CVE-2026-2264","cvss":9.2,"slug":"cve-2026-2264-google-cloud-apigee-ssrf-in-setintegrationrequest-policy","title":"Google Cloud Apigee SSRF in SetIntegrationRequest policy","severity":"high","exploited":false,"published_at":"2026-05-26T17:16:30.76+00:00","url":"https://junglewise.ai/threats/cve-2026-2264-google-cloud-apigee-ssrf-in-setintegrationrequest-policy"},{"cve":"CVE-2026-7428","cvss":9.2,"slug":"cve-2026-7428-google-cloud-alloydb-insecure-default-password-via-terraform-and","title":"Google Cloud AlloyDB insecure default password via Terraform and REST API","severity":"info","exploited":false,"published_at":"2026-05-12T10:16:48.49+00:00","url":"https://junglewise.ai/threats/cve-2026-7428-google-cloud-alloydb-insecure-default-password-via-terraform-and"}],"vendor":{"hub":true,"name":"Google Cloud","slug":"google-cloud","description":"Google's cloud computing platform providing infrastructure, storage, and application services.","url":"https://junglewise.ai/threats/vendors/google-cloud"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-14934","cvss":9.4,"slug":"cve-2026-14934-google-cloud-bigquery-and-dataform-auth-bypass-in-repository","title":"Google Cloud BigQuery and Dataform auth bypass in repository creation","severity":"high","exploited":false,"published_at":"2026-07-13T11:16:26.47+00:00","url":"https://junglewise.ai/threats/cve-2026-14934-google-cloud-bigquery-and-dataform-auth-bypass-in-repository"},{"cve":"CVE-2026-2264","cvss":9.2,"slug":"cve-2026-2264-google-cloud-apigee-ssrf-in-setintegrationrequest-policy","title":"Google Cloud Apigee SSRF in SetIntegrationRequest policy","severity":"high","exploited":false,"published_at":"2026-05-26T17:16:30.76+00:00","url":"https://junglewise.ai/threats/cve-2026-2264-google-cloud-apigee-ssrf-in-setintegrationrequest-policy"},{"cve":"CVE-2026-15810","cvss":8.7,"slug":"cve-2026-15810-google-cloud-looker-xss-leading-to-administrative-account","title":"Google Cloud Looker XSS leading to administrative account takeover","severity":"high","exploited":false,"published_at":"2026-07-24T12:16:47.543+00:00","url":"https://junglewise.ai/threats/cve-2026-15810-google-cloud-looker-xss-leading-to-administrative-account"},{"cve":"CVE-2026-12715","cvss":8.5,"slug":"cve-2026-12715-google-cloud-firebase-studio-missing-authorization-in","title":"Google Cloud Firebase Studio missing authorization in GetSignedGcsUrl RPC","severity":"high","exploited":false,"published_at":"2026-07-17T16:17:13.047+00:00","url":"https://junglewise.ai/threats/cve-2026-12715-google-cloud-firebase-studio-missing-authorization-in"},{"cve":"CVE-2026-81375","slug":"cve-2026-81375-gcp-2026-066","title":"Google Cloud Application Integration Confused Deputy in Email Task","severity":"high","exploited":false,"published_at":"2026-09-28T11:16:47.86+00:00","url":"https://junglewise.ai/threats/cve-2026-81375-gcp-2026-066"},{"cve":"CVE-2026-7428","cvss":9.2,"slug":"cve-2026-7428-google-cloud-alloydb-insecure-default-password-via-terraform-and","title":"Google Cloud AlloyDB insecure default password via Terraform and REST API","severity":"info","exploited":false,"published_at":"2026-05-12T10:16:48.49+00:00","url":"https://junglewise.ai/threats/cve-2026-7428-google-cloud-alloydb-insecure-default-password-via-terraform-and"},{"cve":"CVE-2026-12879","cvss":5.9,"slug":"cve-2026-12879-google-cloud-apigee-improper-input-validation-in-bigquery-dao","title":"Google Cloud Apigee improper input validation in BigQuery DAO","severity":"info","exploited":false,"published_at":"2026-07-09T14:16:27.84+00:00","url":"https://junglewise.ai/threats/cve-2026-12879-google-cloud-apigee-improper-input-validation-in-bigquery-dao"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[]}