CVE-2026-12710
Received Received - Intake

Missing Authorization in Google Cloud Application Integration

Publication date: 2026-08-22

Last updated on: 2026-08-22

Assigner: GoogleCloud

Description
A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-22
Last Modified
2026-08-22
Generated
2026-08-22
AI Q&A
2026-08-22
EPSS Evaluated
N/A
NVD
CVE-2026-12710
EUVD
EUVD-2026-64241

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
google cloud_application_integration From 2025-04-28 (inc) to 2026-04-04 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

A Missing Authorization vulnerability in Google Cloud Application Integration's QueryEngineTask allows external attackers to access sensitive internal data without proper authentication.

Detection Guidance

The vulnerability was patched on April 4, 2026, and no customer action is required. Detection would typically involve checking for unauthorized access to sensitive internal data via QueryEngineTask in Google Cloud Application Integration. Review logs for unusual activity in the integration service between 2025-04-28 and 2026-04-04.

Impact Analysis

This vulnerability could allow unauthorized access to sensitive data, potentially leading to data breaches or leaks of confidential information.

Compliance Impact

The vulnerability allows unauthorized access to sensitive internal data, which could lead to violations of data protection regulations like GDPR and HIPAA if personal or health information is exposed. Unauthorized access risks non-compliance with requirements for data confidentiality and access controls.

Mitigation Strategies

No immediate action is required as the vulnerability was patched on April 4, 2026, and no customer action is needed.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12710. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart