CVE-2026-8934 : 상세 정보

CVE-2026-8934

2026-06-22
16h16 +00:00
Authorization problems
A01-Broken Access Control
2026-10-25
23h10 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched on 7 April 2026, and no customer action is needed.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

참고 자료