HIGH 8.7 NVD

CVE-2026-104384

Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows

Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows unauthenticated remote attackers to escalate privileges via authentication abuse to access the access keys, secret keys, and deployment secrets

References

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0040.md

Published: 2026-10-28 · Source: NVD · Feed updated: 2026-10-28

This high severity vulnerability with a CVSS score of 8.7 was published on 2026-10-28 via NVD.

vulnfeed aggregates 14962 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.