// Google CloudHIGH
Google disclosed CVE-2026-19486, a high-severity server-side request forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01. An unauthenticated attacker can exploit this flaw to leak Compute Engine default service account access tokens. Google patched the vulnerability on June 1, 2026; affected users must redeploy their applications.
// Get alerts for Google Cloud