Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1583 matches found

NVD
NVD•added 2026/09/15 4:17 p.m.•19 views

CVE-2026-19407

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution RCE and tenant-project token theft...

7.7CVSS0.00521EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/15 3:22 p.m.•41 views

CVE-2026-19407 GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDK

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution RCE and tenant-project token theft...

7.7CVSS0.00521EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/15 3:22 p.m.•18 views

EUVD-2026-78667

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution RCE and tenant-project token theft...

7.7CVSS5.7AI score0.00521EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/15 3:22 p.m.•39 views

CVE-2026-19407

CVE-2026-19407 affects the Google Cloud Gemini Enterprise Agent Platform SDK for Python in versions prior to 1.166.1 . The vulnerability is a GCS Bucket Squatting flaw that allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft without requiring prior privileges ...

7.7CVSS5.8AI score0.00521EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/15 12:00 a.m.•7 views

CVE-2026-19407: Use of Insufficiently Random Values

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution RCE and tenant-project token theft...

7.7CVSS5.8AI score0.00521EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux•added 2026/09/15 12:00 a.m.•14 views

Security update for google-cloud-sap-agent (important)

openSUSE security update: security update for google-cloud-sap-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21834-1 Rating: important References: bsc1210938 bsc1272128 bsc1278987 bsc1279201 bsc1279304 Cross-References: CVE-2026-56852...

9.1CVSS6.3AI score0.00641EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux•added 2026/09/14 2:48 p.m.•14 views

Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272128. CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass ...

9.1CVSS6AI score0.00641EPSS
SaveExploits0References18
osv_suse
osv_suse•added 2026/09/14 2:48 p.m.•34 views

SUSE-SU-2026:4178-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272128. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for...

8.7CVSS6.2AI score0.00641EPSS
SaveExploits0References10
osv_suse
osv_suse•added 2026/09/14 8:49 a.m.•10 views

SUSE-SU-2026:23729-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272128. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for...

8.7CVSS6.2AI score0.00641EPSS
SaveExploits0References10
osv_suse
osv_suse•added 2026/09/14 8:49 a.m.•13 views

SUSE-SU-2026:23708-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272128. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for...

8.7CVSS6.2AI score0.00641EPSS
SaveExploits0References10
osv_opensuse
osv_opensuse•added 2026/09/14 8:32 a.m.•21 views

OPENSUSE-SU-2026:21834-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272128. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for...

8.7CVSS6.2AI score0.00641EPSS
SaveExploits0References9
NVD
NVD•added 2026/09/11 9:17 a.m.•28 views

CVE-2026-19486

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

8.7CVSS0.0027EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/11 8:18 a.m.•55 views

CVE-2026-19486 SSRF in Gemini Enterprise Agent Platform App Builder

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

8.7CVSS0.0027EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/11 8:18 a.m.•20 views

CVE-2026-19486 SSRF in Gemini Enterprise Agent Platform App Builder

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

8.7CVSS5.6AI score0.0027EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/11 8:18 a.m.•56 views

CVE-2026-19486

CVE-2026-19486 is a Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder (versions prior to 2026-06-01 on Google Cloud Platform). An unauthenticated attacker can exploit it to leak the Compute Engine default service account access token , r...

8.7CVSS5.6AI score0.0027EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/09/11 12:00 a.m.•31 views

PT-2026-89808

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

8.7CVSS5.4AI score0.0027EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/11 12:00 a.m.•10 views

CVE-2026-19486: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...

8.7CVSS5.6AI score0.0027EPSS
SaveExploits0References2
osv_cve
osv_cve•added 2026/09/09 9:17 a.m.•31 views

CVE-2026-79696

A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit ADK for Python versions 2.0.0 through 2.6.0 on Python OSS, Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session...

10CVSS6.8AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/09 12:00 a.m.•11 views

CVE-2026-79696: Incomplete List of Disallowed Inputs

A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit ADK for Python versions 2.0.0 through 2.6.0 on Python OSS, Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session...

10CVSS6.7AI score0.0074EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus•added 2026/09/09 12:00 a.m.•18 views

openSUSE 16 Security Update : google-cloud-sap-agent (openSUSE-SU-2026:21755-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21755-1 advisory. This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers...

5.3CVSS6AI score0.00336EPSS
SaveExploits0References3
Rows per page
Query Builder