en
Google Cloud is Google’s global cloud computing platform and business. It operates in cloud infrastructure, data and analytics, application development, cybersecurity, and artificial intelligence, offering managed services and developer tooling for organizations that build, deploy, and operate workloads across cloud and hybrid environments.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/31/2026, Google Cloud recorded 22 security vulnerabilities in the last 90 days across 17 products, including 22 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Application Integration had the most security vulnerabilities in the Google Cloud ecosystem, with 6 vulnerabilities—approximately 27.27% of the provider's total vulnerabilities during this period.
CVE-2026-93327Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code ExecutionCVE-2026-85268Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle IDCVE-2026-85299Missing Authorization in Compute Engine allows Cross-Project Disk ExfiltrationCVE-2026-85297Bucket Squatting in Cloud Run MCP leads to Service Account TakeoverCVE-2026-93328Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write63 Results | Page 1 of 7
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityCritical |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityCritical |
| SeverityCritical |