CVE ID :CVE-2026-85299 Published : Oct. 27, 2026, 9:02 a.m. | 1 hour, 21 minutes ago Description :A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute Engine versions prior to 2026-08-31 on Google Cloud Platform allows an...

#Sicherheitslücke #Cloud

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-85299 - Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration

VERWANDTEARTIKEL

The web’s having a rough week. Here’s how to browse safely

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

CVE-2026-106087 - TRO600 contains an arbitrary file read vulnerabili

Critical HashiCorp Consul Kubernetes Flaw Allows Attackers to Gain Elevated Privileges

CVE-2026-115216 - Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials

CVE-2026-112362 - @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets