CVE-2026-104383: Code injection in EagleCloud Aquila on-premises version

Q: Who can exploit this issue?

An attacker must be authenticated and able to reach the Pigeon MFA service on an on-premises EagleCloud Aquila deployment. The provided information does not indicate that unauthenticated attackers can exploit it.

Q: Which deployments and versions are affected?

The issue affects on-premises EagleCloud Aquila deployments using versions through 2.6.7.2. The provided information does not state whether cloud-hosted deployments are affected.

Q: What is the impact of successful exploitation?

A successful authenticated remote attacker can execute arbitrary code through code injection in the Pigeon MFA service.

Published Oct 28, 2026

Updated

Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to execute arbitrary code via code injection

Affected Software

1 affected component

EagleCloud Aquila<=2.6.7.2

Event History

Oct 28, 2026

CVE Published

via MITRE·04:21 AM

Data Sourced

via MITRE·04:21 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker must be authenticated and able to reach the Pigeon MFA service on an on-premises EagleCloud Aquila deployment. The provided information does not indicate that unauthenticated attackers can exploit it.

Which deployments and versions are affected?

The issue affects on-premises EagleCloud Aquila deployments using versions through 2.6.7.2. The provided information does not state whether cloud-hosted deployments are affected.

What is the impact of successful exploitation?

A successful authenticated remote attacker can execute arbitrary code through code injection in the Pigeon MFA service.

CVE-2026-104383: Code injection in EagleCloud Aquila on-premises version

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which deployments and versions are affected?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which deployments and versions are affected?

What is the impact of successful exploitation?