Google Cloud Apigee vulnerabilities

Latest Google Cloud Apigee CVEs

Newest publication first

1. CVE-2026-12879 Cross-Tenant Data Exfiltration in Apigee via BigQuery Confused Deputy

   Published 2026-07-09

   Medium·CVSS 5.9 EPSS 0.30%

   An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-tenant data. This vulnerability was patched on 12 June 2026 on the Apigee Servers, and no c...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.