SQL Injection Vulnerability in Google SecOps Dashboard Widget API
CVE-2026-15623

9.4CRITICAL

Key Information:

Vendor: Google Cloud
Status: Google Secops (chronicle Soar)
Vendor: CVE Published:; 17 August 2026

🔔 Create Google Cloud Vulnerability Alert

What is CVE-2026-15623?

A SQL Injection vulnerability exists in the legacy dashboard widget API of Google SecOps (Chronicle SOAR) that allows an authenticated attacker to execute blind SQL queries by sending a specially crafted request parameter. This flaw can potentially compromise the integrity and confidentiality of the data within the system. Users are encouraged to upgrade to version 6.3.85 or later to mitigate this risk, as the vulnerability has been addressed in the latest release.

Affected Version(s)

Google SecOps (Chronicle SOAR) 0 < 6.3.85

References

https://docs.cloud.google.com/chronicle/docs/soar/release...

CVSS V4

Score:

9.4

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 17, 2026
Vulnerability Reserved
Jul 13, 2026

Credit

Jakub Domeracki

CVE-2026-15623 Data

JSON