What’s Vulnerable › Vulnerabilities
CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
- Severity: high (CVSS 8.5 v4.0)
- Exploited in the wild: yes — in CISA KEV since 2026-10-20
- EPSS: 2.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-14 · updated 2026-10-21
- Weakness: CWE-78
Description
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Summary
SiteGuard Server Edition contains an OS command injection flaw that could let an attacker run arbitrary OS commands with root or SYSTEM privileges on the host. The issue is rated high severity (CVSS 8.5) and is listed in CISA's Known Exploited Vulnerabilities catalog, with active exploitation reported. Affected is E-Guardian Siteguard; fixes are available in versions 3.10, 7.00, and 8.00. Apply the vendor mitigations and update to a fixed version per CISA BOD 26-04 guidance, and discontinue use if mitigations are unavailable.
يحتوي SiteGuard Server Edition على ثغرة حقن أوامر في نظام التشغيل قد تتيح للمهاجم تنفيذ أوامر نظام تشغيل عشوائية بصلاحيات root أو SYSTEM على النظام المضيف. صُنّفت الثغرة عالية الخطورة (CVSS 8.5) وهي مدرجة في كتالوج CISA للثغرات المعروفة بالاستغلال، مع الإبلاغ عن استغلال نشط. المنتج المتأثر هو E-Guardian Siteguard، وتتوفر الإصلاحات في الإصدارات 3.10 و7.00 و8.00. طبّق mitigations المورّد وحدّث إلى إصدار مُصلح وفق إرشادات CISA BOD 26-04، وتوقف عن استخدام المنتج إذا لم تتوفر mitigations.
Affected products
- E-Guardian Siteguard: from 2.20 before 8.00; from 2.20 before 7.00; from 2.20 before 3.10; from 4.10 before 8.00; 8.00, 8.00-update1, 8.00-update2, 8.00-update3, 7.00, 7.00-update1 (+5) — fixed in 3.10, 7.00, 8.00
How to fix
Upgrade to a fixed version: E-Guardian Siteguard 3.10, 7.00, 8.00. Check the vendor advisory for mitigations.
References
- https://jvn.jp/en/jp/JVN88474777/
- https://www.eg-secure.co.jp/siteguard/news/alert-202610-1
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-106931
Get alerted when CVE-2026-106931 or the next vulnerability affects your stack