CVE-2026-2264

Vulnerability Description

A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For successful exploitation, an administrator must initially establish an insecure configuration of the API proxy.

Related Weaknesses (CWE)

CWE-918

References

https://docs.cloud.google.com/apigee/docs/security-bulletins/security-bulletins#

FAQ

What is CVE-2026-2264?

CVE-2026-2264 is a documented vulnerability. A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For succes...

How severe is CVE-2026-2264?

CVSS scoring is not yet available for CVE-2026-2264. Check NVD for updates.

Is there a patch for CVE-2026-2264?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.