Search vulnerabilities

Results 2

Export CSV
CVE-2026-104384

Insufficiently protected credentials in EagleCloud Aquila on-premises version

Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows unauthenticated remote attackers to escalate privileges via authentication abuse to access the access keys, secret keys, and deployment secrets

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-104383

Code injection in EagleCloud Aquila on-premises version

Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to execute arbitrary code via code injection

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Products