Aquila vulnerabilities
CVEs whose affected-version data names the Aquila package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-104384High· 8.7Insufficiently protected credentials in EagleCloud Aquila on-premises version
Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows unauthenticated remote attackers to escalate privileges via authentication a…
▾ TwilightEagleCloud · Aquilavia CVEORG
CVE-2026-104383Critical· 9.4Code injection in EagleCloud Aquila on-premises version
Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to execute arbitrary code via code injection
▾ MidnightEagleCloud · Aquilavia CVEORG