CVE-2026-81375 – Confused Deputy in Application Integration allows Internal File Read

CVE ID :CVE-2026-81375

Published : Sept. 28, 2026, 10:58 a.m. | 27 minutes ago

Description :A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path.

This vulnerability was patched on 30 June 2026, and no customer action is needed.

Severity: 8.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… CVE ID :CVE-2026-81375

Published : Sept. 28, 2026, 10:58 a.m. | 27 minutes ago

Description :A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path.

This vulnerability was patched on 30 June 2026, and no customer action is needed.

Severity: 8.3 | HIGH

آسیب‌پذیری‌های جدید و وصله‌های امنیتی به‌صورت مداوم منتشر می‌شوند و عدم بروزرسانی به‌موقع می‌تواند امنیت سرویس‌های حیاتی را به خطر بیندازد. خدمات مدیریت و پشتیبانی سرور آفاق هاستینگ شامل پایش امنیتی، بروزرسانی نرم‌افزارها، نصب Patchهای امنیتی و سخت‌سازی سرورها است.

خدمات مدیریت و امنیت سرور

نوشته های مشابه