{"data":{"id":"40e3bae2-e794-4c36-b9e3-324c1025fa2d","title":"CVE-2026-19486: A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder…","summary":"A Server-Side Request Forgery (SSRF) flaw in Google Cloud Gemini Enterprise Agent Platform App Builder, in versions prior to 2026-06-01 on Google Cloud Platform, lets an unauthenticated attacker leak the Compute Engine default service account access token. The vulnerability was identified as CVE-2026-19486.","solution":"This vulnerability was patched on 01 June 2026. Users will need to redeploy their previously deployed apps.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-19486","publishedAt":"2026-09-11T09:17:20.327Z","cveId":"CVE-2026-19486","cweIds":["CWE-918"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Google"],"affectedVendorsRaw":["Google Cloud Gemini Enterprise Agent Platform App Builder"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00419,"epssCheckedAt":"2026-11-04T06:10:14.105Z","kevDateAdded":null,"advisoryAliases":["GHSA-m9g6-pjc8-qxfr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T12:08:09.212Z","patchAvailable":null,"disclosureDate":"2026-09-11T09:17:20.327Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[]}}