CVE-2026-104383EUVD-2026-111587
Code injection in EagleCloud Aquila on-premises version
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The on-premises version of EagleCloud Aquila, specifically its Pigeon MFA service, is affected by this flaw. An authenticated remote attacker could exploit it to run arbitrary code on the affected system.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to execute arbitrary code via code injection
Affected versions
- EagleCloud Aquila
through 2.6.7.2