{"id":"CVE-2026-104384","published":"2026-10-28T05:16:59.700","lastModified":"2026-10-28T05:16:59.700","description":"Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows unauthenticated remote attackers to escalate privileges via authentication abuse to access the access keys, secret keys, and deployment secrets","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-522"],"vendors":[],"products":[],"references":[{"url":"https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0040.md","tags":[]}],"exploitRefs":[{"url":"https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0040.md","tags":[]}],"hasPoc":true,"ai":null}