CVE-2026-2264

CVE-2026-2264CVE-2026-2264

Description

A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For successful exploitation, an administrator must initially establish an insecure configuration of the API proxy.

Scoring

Last modified2026-07-24
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.