{"id":"CVE-2026-104383","published":"2026-10-28T05:16:59.533","lastModified":"2026-10-28T05:16:59.533","description":"Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to execute arbitrary code via code injection","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0039.md","tags":[]}],"exploitRefs":[{"url":"https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0039.md","tags":[]}],"hasPoc":true,"ai":null}