8.7Hoch
CVE-2026-104384Insufficiently protected credentials in EagleCloud Aquila on-premises version
Beschreibung
Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows unauthenticated remote attackers to escalate privileges via authentication abuse to access the access keys, secret keys, and deployment secrets
Schwachstellentyp (CWE):
CWE-522
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| EagleCloud | Aquila | ≤ 2.6.7.2 |