confirmation forgery – CyberSecurityBoard

Critical CVEs

CVE-2026-18236: Google ADK Continuation Forgery

Google ADK for Python before 2.5.0 allows attackers to forge confirmation events in session history, causing unauthorized execution of sensitive tools. CVSS…

ADK confirmation forgery CVE-2026-18236 CWE-863

August 6, 2026