CVE-2026-93327

Vendor

Google

Product

Application Integration

CVSS v4.0

9.4 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear

EPSS

0.003 (p17)

Weakness

CWE-502

Exposure class

Web platform, Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 36
   Google Cloud bulletin Google Cloud 8d ago

   GCP-2026-074

   Published: 2026-10-28 Description Description Severity Notes A Deserialization of Untrusted Data vulnerability was discovered in the SubWorkflow task in Application Integration versions prior to September 11, 2026. What should I…

   Fix available CVE-2026-93327CVE-2026-85299CVE-2026-109618+1 more Google
2. 41
   CVE NVD 41h ago

   A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on…

   A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code…

   CVSS 9.4 CVE-2026-93327 Google