CRITICAL 9.4 NVD

CVE-2026-104383

Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote

Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to execute arbitrary code via code injection

References

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0039.md

Published: 2026-10-28 · Source: NVD · Feed updated: 2026-10-28

This critical severity vulnerability with a CVSS score of 9.4 was published on 2026-10-28 via NVD.

Risk Timeline

CVE Disclosed2026-10-28 · -1 days ago

Remediation Resources

GitHub

github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-20

vulnfeed aggregates 14962 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.