CVE-2026-2031
Google Cloud Application Integration: Exposed internal APIs allow Information Disclosure and Remote Code Execution.
An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticated attacker to disclose sensitive internal information and execute arbitrary code using specially crafted HTTP requests to inadvertently exposed internal API endpoints.
CVSS 4.0 · 10 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products