CVE-2026-104384
Received Received - Intake

Insufficiently Protected Credentials in EagleCloud Aquila

Publication date: 2026-10-28

Last updated on: 2026-10-28

Assigner: Mandiant Inc.

Description
Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows unauthenticated remote attackers to escalate privileges via authentication abuse to access the access keys, secret keys, and deployment secrets

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-28
Last Modified
2026-10-28
Generated
2026-10-28
AI Q&A
2026-10-28
EPSS Evaluated
N/A
NVD
CVE-2026-104384
EUVD
EUVD-2026-111588

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
EagleCloud Aquila 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-522 The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-104384 is a critical vulnerability in EagleCloud Aquila on-premises versions up to 2.6.7.2. It involves insufficiently protected credentials in tunnel gateway and provisioning interfaces, allowing unauthenticated remote attackers to escalate privileges by accessing infrastructure access keys, secret keys, and deployment secrets.

Detection Guidance

Check for exposed tunnel gateway or provisioning interfaces on your network by scanning for open ports and endpoints. Look for unauthenticated API endpoints that may expose credentials. Verify if your Aquila version is below 2.6.7.3, as this vulnerability affects versions through 2.6.7.2.

Impact Analysis

An attacker could exploit this to extract high-privilege deployment keys, bypass edge access proxies, and impersonate administrative users. Exploitation is highly feasible due to the fully internet-exposed vulnerable endpoint and requires no advanced techniques or victim interaction.

Mitigation Strategies

Immediately upgrade Aquila to version 2.6.7.3 or later to patch the vulnerability. Restrict access to tunnel gateway and provisioning interfaces by implementing network segmentation or firewall rules. Rotate all exposed access keys, secret keys, and deployment secrets to prevent unauthorized access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-104384. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart