Approved changes feed: RSS · Atom

cpe:2.3:a:google_cloud:google_secops_soar:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGoogle Cloud (34bf7c79-23c3-583b-8203-6d0252c54ec0)
ProductGoogle Secops Soar (0ae5463f-15de-5160-be9c-379f61fbb122)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9918 vulnerable 2026-06-03 15:14:40.127635 Zip Slip in Google SecOps SOAR allows for Remote Code Execution
A Path Traversal vulnerability in the archive extraction component in Google SecOps SOAR Server (versions 6.3.54.0, 6.3.53.2, and all prior versions) allows an authenticated attacker with permissions to import Use Cases to achieve Remote Code Execution (RCE) via uploading a malicious ZIP archive containing path traversal sequences.
Published: 2025-09-11T07:37:50.010Z
Updated: 2025-09-11T12:28:15.397Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.