THREAT OPS › Threat News › [NVD] CVE-2026-12710 — A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data.
The issue was patched on April 4, 2026; no customer action is required.
[NVD] CVE-2026-12710 — A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required.
CVE-2026-12710 CVSS: None Published: 2026-08-22T09:16:53.340
A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data.
The issue was patched on April 4, 2026; no customer action is required.
MITRE ATT&CK techniques
- Cloud Application IntegrationT1671
Indicators of compromise
- CVE-2026-12710cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-12710