[UPDATE] [hoch] Google Cloud Platform: Schwachstelle ermöglicht Cross-Site Scripting

What this means for you — Security leader:Review CERT-Bund WID-SEC-2026-2476 and Google's matching bulletin for the confirmed GCP XSS; confirm whether your estate uses the affected Cloud service and apply the vendor fix or mitigating config.

What this means for you — Lean IT orgs:If you use Google Cloud Platform, open the Google security bulletin for this XSS and apply the fix or configuration change it lists; if a provider runs GCP for you, ask them whether your tenant is affected.

What this means for you — MSP:Inventory clients on Google Cloud Platform, map them to the affected service in WID-SEC-2026-2476, and roll out Google's fix or workaround across those tenants.

What this means for you — Researcher:Pull WID-SEC-2026-2476 and Google's bulletin for the XSS root cause, exact GCP component, CVSS/exploit preconditions, and patch diff.