Advisories · Technology

Google Cloud Apigee-X.

Every CVE that names Google Cloud Apigee-X among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-2264 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Server-Side Request Forgery and Credential Exfiltration in Google Cloud Apigee via SetIntegrationRequest Policy.
- Google Cloud Apigee-X
- Server-side request forgery (SSRF)
Not analysed yet 26 May 2026
CVE-2025-13292 CVE record

CVSS 7.6 High

Improper access control in Google Cloud Apigee-X allows cross-tenant Analytics modification and log data access.
- Google Cloud Apigee-X
- Privilege escalation
Not analysed yet 6 Dec 2025