Insufficiently Protected Credentials in EagleCloud Aquila by Mandiant

CVE-2026-104384

What is CVE-2026-104384?

EagleCloud Aquila contains a security weakness due to insufficiently protected credentials in its tunnel gateway and provisioning interfaces. This vulnerability allows unprivileged remote attackers to exploit the system through authentication abuse, gaining unauthorized access to important access keys, secret keys, and deployment secrets. The affected versions of the product are up to 2.6.7.2 on on-premises platforms, emphasizing the need for enhanced security measures to prevent privilege escalation.

References