CVE-2026-12879: Google Cloud Apigee

Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days.

An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-tenant data. This vulnerability was patched on 12 June 2026 on the Apigee Servers, and no customer action is needed.

Affected products

• Google Cloud Apigee: before 2026-06-12 (fixed in 2026-06-12)

Published 2026-07-09. Last modified 2026-07-09.