CVE-2026-85267
— UNSCOREDPublished 2026-10-20 · Updated 2026-10-20
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cross-origin WebSocket request. This vulnerability was patched on 22 July 2026, and no customer action is needed.
Weaknesses
CWE-1385
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-104380
- UNSCOREDCVE-2026-107858PoC
- MEDIUMCVE-2026-109330PoC
- HIGHCVE-2026-112085PoC
- MEDIUMCVE-2026-55463PoC
- UNSCOREDCVE-2026-67405PoC
- HIGHCVE-2026-77363PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.