Findings

CVE-2026-19759

Published: 2026-09-28 Description Description Severity Notes An Incorrect Authorization vulnerability was discovered in the task configuration in Application Integrati…

Published Oct 14, 2026 · Google Google Cloud

Published: 2026-09-28 Description Description Severity Notes An Incorrect Authorization vulnerability was discovered in the task configuration in Application Integration versions prior to June 17, 2026. What should I do? No customer action is required. This vulnerability was patched on June 17, 2026. What vulnerabilities are being addressed? An authenticated user could use an internal-only task type to execute arbitrary internal RPCs from the Google-internal production network under a privileged identity. Critical CVE-2026-19759 ]]>

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2026 · Google Cloud Security Bulletins

    Detected

    Published: 2026-09-28 Description Description Severity Notes An Incorrect Authorization vulnerability was discovered in the task configuration in Application Integration versions prior to June 17, 2026. What should I do? No customer action is required. This vulnerability was patched on June 17, 2026. What vulnerabilities are being addressed? An authenticated user could use an internal-only task ty

Sources

  • Google Cloud Security BulletinsVendor advisoryCVE-2026-19759

    Published: 2026-09-28 Description Description Severity Notes An Incorrect Authorization vulnerability was discovered in the task configuration in Application Integration versions prior to June 17, 2026. What should I do? No customer action is required. This vulnerability was patc

    docs.cloud.google.com
CVE-2026-19759 · ZeroDay Findings