CVE-2026-19485
2026-08-26
19h16 +00:00
19h16 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictable bucket names.
This vulnerability was patched and no customer action is needed.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Use of Insufficiently Random Values The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. |
