Critical severityNVD Advisory· Published Aug 26, 2026· Updated Aug 26, 2026
CVE-2026-19485
CVE-2026-19485
Description
A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictable bucket names.
This vulnerability was patched and no customer action is needed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <2026-04-27
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.