Vulnerabilities CVE-2026-15587

CVE-2026-15587

Critical

Open

TLP:CLEAR

Privilege Escalation in Google SecOps (Chronicle SOAR) via Crafted Authentication Header

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header. This vulnerability was patched with version 6.3.85, and no customer action is needed.

Details

CVSS Score: 9.4
EPSS Score ⓘ: 0.16%

5.8th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/U:Clear
Confidence: 90%
Published: Aug 5, 2026
Last Modified: Aug 5, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.