On July 15th, 2026, we released an updated version of Apigee (1-18-0-apigee-1)

## Announcement Announcement On July 15th, 2026, we released an updated version of Apigee (1-18-0-apigee-1). **Note:** Rollouts of this release began today and may take four or more business days to be completed across all Google Cloud zones. Your instances may not have the features and fixes available until the rollout is complete. ## Fix Fixed | Bug ID | Description | | ------------- | -------------------------------------------------------------------------------------------------- | | **527586459** | Fixed a cache policy throttling bug (CacheThrottlerV2 key poisoning) to enhance reliability. | | **525697701** | Fixed an issue where API proxy deployments could get stuck during basepath migrations in Apigee X. | | **N/A** | Updates to infrastructure and libraries. | ## Security Security | Bug ID | Description | | ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------ | | **527415966, 524656652** | **Security fix for Apigee.** Upgraded the Apigee ingress gateway (ASM) to patch security vulnerabilities. | | **527956223** | **Security fix for Apigee.** Enhanced security in the Java Callout policy to prevent sandbox escape. | | **519729209** | **Security fix for Apigee.** Fixed a SAML XML Signature Wrapping (XSW) vulnerability in the ValidateSAMLAssertion policy. | | **530886487** | **Security fix for Apigee.** Upgraded the apigee-connect-agent to patch [CVE-2026-25680](https://nvd.nist.gov/vuln/detail/CVE-2026-25680). | | **N/A** | **Security fix for Apigee infrastructure.** | ## Announcement Announcement ### v1.15.6 On July 15, 2026 we released an updated version of the Apigee hybrid software, v1.15.6. * For information on upgrading, see [Upgrading Apigee hybrid to version v1.15.6](https://cloud.google.com/apigee/docs/hybrid/v1.15/upgrade). * For information on new installations, see [The big picture](https://cloud.google.com/apigee/docs/hybrid/v1.15/big-picture). **Note:** This is a patch release: The container images used in patch releases are integrated with the Apigee hybrid Helm charts. Upgrading to a patch via the Helm chart automatically updates the images. No manual image changes are typically needed. For information on container image support in Apigee hybrid releases, see [Apigee release process](https://cloud.google.com/apigee/docs/release/apigee-release-process#apigee-hybrid-container-images). ## Security Security Various security and CVE fixes are included in this release.