Views
11

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

Update Summary

Apigee X updated to 1-18-0-apigee-1 on July 15, 2026. This release includes reliability fixes, infrastructure updates, and security patches including CVE-2026-25680.

Update Details

Security

  • Upgraded the Apigee ingress gateway (ASM) to patch security vulnerabilities.
  • Enhanced security in the Java Callout policy to prevent sandbox escape.
  • Fixed a SAML XML Signature Wrapping (XSW) vulnerability in the ValidateSAMLAssertion policy.
  • Upgraded the apigee-connect-agent to patch CVE-2026-25680.
  • Security fix for Apigee infrastructure.

Bug Fixes

  • Fixed a cache policy throttling bug (CacheThrottlerV2 key poisoning) to improve reliability.
  • Fixed an issue where API proxy deployments could get stuck during basepath migrations in Apigee X.
  • Updated infrastructure and libraries.

Hints

  • Rollout began on July 15, 2026 and may take four or more business days to complete across all Google Cloud zones; features and fixes may not be available until rollout finishes.
Product Information

Vendor: Google

Product: Cloud

Product type: Other

Platform: Web

Version: 1-18-0-apigee-1

Vendor release date: Jul 15, 2026

Published on updatealert.io: Jul 16, 2026

Description: Cloud platform for compute, data, networking, and developer services.