Skip to content
OpenAdvisories
High · 8.7 CVE-2026-104384 EUVD-2026-111588GHSA-wm5p-g46q-pcjq

Insufficiently protected credentials in EagleCloud Aquila on-premises version

Published Oct 28, 2026 · Updated Nov 5, 2026 · Assigned by Mandiant

Description

Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows unauthenticated remote attackers to escalate privileges via authentication abuse to access the access keys, secret keys, and deployment secrets

Affected products

VendorProductAffectedFixed
EagleCloud Aquila ≤ 2.6.7.2 —

References