What is GCP-2026-074?

GCP-2026-074 is a security advisory published by Google Cloud Security Bulletins with Critical severity. GCP-2026-074 — Published: 2026-10-28Description Description Severity Notes A Deserialization of Untrusted Data vulnerability was discovered in the…

Which CVE IDs does GCP-2026-074 cover?

GCP-2026-074 covers the following CVE IDs: CVE-2026-93327. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GCP-2026-074Critical

GCP-2026-074 — Published: 2026-10-28Description Description Severity Notes A Deserialization of Untrusted Data vulnerability was discovered in the…

Vendor

Google Cloud Security Bulletins

Published

October 28, 2026

Last Modified

October 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-93327 →

📋 Description

Published: 2026-10-28Description Description Severity Notes A Deserialization of Untrusted Data vulnerability was discovered in the SubWorkflow task in Application Integration versions prior to September 11, 2026. What should I do? No customer action is required. This vulnerability was patched on September 11, 2026. What vulnerabilities are being addressed? An authenticated user could use a maliciously crafted serialized object to execute arbitrary code. Critical CVE-2026-93327

🔗 References (1)

advisoryhttps://docs.cloud.google.com/support/bulletins/index#gcp-2026-074