Google SecOps (Chronicle SOAR) vulnerabilities

2 known vulnerabilities in Google SecOps (Chronicle SOAR) from Google Cloud. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  Google SecOps (Chronicle SOAR): Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-15623Aug 17, 2026Google Cloud

  A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. Thi

• 9.4 Critical severity

  Google SecOps (Chronicle SOAR): Origin Validation Error

  CVE-2026-15587Aug 5, 2026Google Cloud

  Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header. This