CVE-2026-2264
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
May 26, 2026
Vendor
unknown
Description
A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For successful exploitation, an administrator must initially establish an insecure configuration of the API proxy.