CVE-2026-19485 – Bucket Squatting in Vertex AI Search for Commerce

​CVE ID :CVE-2026-19485

Published : Aug. 26, 2026, 6:06 p.m. | 1 hour, 8 minutes ago

Description :A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim’s project number to obtain read/write access to staged data and error logs using predictable bucket names.

This vulnerability was patched and no customer action is needed.

Severity: 9.3 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More