Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in the tenant project using crafted JDBC connection string parameters. This vulnerability was patched on 1 May 2026, and no customer action is needed.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-29 | 1 | Patch1 |
| 2026-08-30 | 2 | Disclosure2 |
CVE-2026-12717 An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Clou… https://www.cve.org/CVERecord?id=CVE-2026-12717
Post summary
The text announces CVE-2026-12717, describing an Improper Input Validation issue in the CData JDBC driver integration for Google Cloud BigQuery Data Transfer Service prior to 2026‑05‑01.
🚨*CVE* CVE-2026-12717 An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Clou… https://www.cve.org/CVERecord?id=CVE-2026-12717 ----- Traducción: CVE-2026-12717 Una… https://infoflow.cloud`
Post summary
CVE‑2026‑12717 is disclosed as an improper input validation flaw in Google Cloud BigQuery Data Transfer Service’s CData JDBC integration before 2026‑05‑01, with no mention of exploitation, fixes, or PoC.
CVE-2026-12717: BigQuery Data Transfer Service Injection CVE-2026-12717 is a critical-severity vulnerability in BigQuery Data Transfer Service (CVSS 9.4). An Improper Input Validation vulnerability in CData JDBC components may allow injection attacks that could impact data confidentiality, integrity, or availability. Organizations using BigQuery Data Transfer Service should review affected connectors, validate CData JDBC driver versions, apply available updates, and monitor for unusual query or transfer activity. Proactive patching and continuous visibility are key to staying secure. 🚀 #Cybersecurity #CVE #BigQuery #GoogleCloud #CloudSecurity #VulnerabilityManagement #CyberResilience #DataSecurity #VistemSolutions #VistemSecurePro https://www.strix.ai/cve/CVE-2026-12717?utm_source=in_page&utm_medium=Vistem+Solutions%2C+Inc.&utm_campaign=publer
Post summary
The post reports a critical CVE affecting BigQuery Data Transfer Service, provides technical details and a CVSS score, and urges users to apply updates and monitor activity to mitigate the issue.