Google Cloud vulnerabilities and fixes

CVEs that mention Google Cloud, ranked by priority. 6 tracked.

Google Cloud has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-08-24. Highest priority: CVE-2026-66907 (score 50/100).

• CVE-2026-66907 HIGH 7.5 UPGRADE Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache C
• CVE-2026-15810 HIGH 8.7 A Cross-Site Scripting (XSS) vulnerability in Google Cloud Looker versions prior to 25.6.103, 25.12.65, 25.18.
• CVE-2026-68868 MEDIUM 6.5 UPGRADE The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team sco
• CVE-2026-15587 CRITICAL 9.4 Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platf
• CVE-2026-48244 MEDIUM 5.3 Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed t
• CVE-2026-48245 MEDIUM 5.3 Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the

FAQ

How do I fix Google Cloud vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Google Cloud being exploited right now?

None of the tracked Google Cloud CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Google Cloud CVE should I patch first?

CVE-2026-66907 currently ranks highest (50/100): Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache C.

← Back to latest CVEs