CVE-2026-12710
A permanent, source-backed tracker page. Values are shown only when returned; explicit gaps and read failures remain different states.
What it is
ReportedA Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required. Source description excerpt; complete tracked detail loads below.
Source reported · Source: CVE record · Source last published: · Source last updated: · Tracker data as of:
What is affected
ReportedGoogle Cloud — Application Integration. Product-level identification only; no affected-version conclusion is available from this field.
Source reported · Source: CVE record · Source last published: · Source last updated: · Tracker data as of:
Urgency and basis
ReportedTrack · 115.8
Tracker computed · Tracker decision tier from the evidence detailed below · Source last updated: · Tracker data as of:
Exploitation evidence
Not reportedNot reported by tracked sources.
What to do
Not reportedNot reported by tracked sources.
Evidence detail
Loading the full tracker evidence record…