Vulnerability details
CVE-2026-15587
Google Cloud Google SecOps
Privilege Escalation in Google SecOps (Chronicle SOAR) via Crafted Authentication Header
CVSS 4.0
9.4Critical
Official description
Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header. This vulnerability was patched with version 6.3.85, and no customer action is needed.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.4Critical | 4.0 | CVEProject cvelistV5 (CNA) (GoogleCloud) | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/U:Clear |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Google Cloud | Google SecOps (Chronicle SOAR) | v < 6.3.85 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-08-05
- Last updated
- 2026-08-05
- State
- Published
- Assigner (CNA)
- GoogleCloud
Exploit prediction (EPSS)
0.22%
Probability of exploitation in 30 days
13.8%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-346Origin Validation Error