PT-2026-73215 · Google · Google Secops

Jakub Domeracki

·

CVE-2026-15623

·

Published

2026-08-17

·

Updated

2026-08-17

CVSS v4.0

9.4

Critical

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/U:Clear
Name of the Vulnerable Software and Affected Versions Google Cloud Google SecOps (Chronicle SOAR) versions prior to 6.3.85
Description An authenticated attacker can execute blind SQL queries—a technique used to extract information from a database by observing the application's response to specific queries—via a crafted request parameter in a legacy dashboard widget API.
Recommendations Update to version 6.3.85.

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-15623

Affected Products

Google Secops