CVE-2026-106931

CVE Enrichment

CVSS: 8.5 HIGH
EPSS: 0.66%
EPSS Percentile: 50.66%
CISA KEV: Not listed

Description

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: vultures@jpcert.or.jp
Published: 14-Oct-2026 12:16
Last Modified: 16-Oct-2026 23:16
EPSS Date: 2026-10-18
CWE: CWE-78

CVSS Vector


            CVSS:4.0                            AV:L /
                            AC:L /
                            AT:N /
                            PR:L /
                            UI:N /
                            VC:H /
                            VI:H /
                            VA:H /
                            SC:N /
                            SI:N /
                            SA:N /
                            E:X /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

References

Last enrichment sync: 19-Oct-2026 06:40
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (4)

The second security flaw is a command injection bug in EG Secure Solutions SiteGuard Server Edition (CVE-2026-106931, CVSS score: 8.5) that the Japanese company confirmed as being exploited. No additional details CISA Sets Patch Deadlines for Exploited Plex2Shell, Siemens and SiteGuard Flaws
CISA has also added CVE-2026-106931 to KEV, an OS command injection flaw that affects affecting the SiteGuard Server Edition web application firewall (WAF). CISA Warns of Active Exploitation of Plex2Shell and Other Flaws
CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability CISA Adds Six Actively Exploited Vulnerabilities to KEV Catalog
The security issue is tracked as CVE-2026-106931 and affects the statistics feature in host-based WAF instances, which is enabled by default. Hackers Exploit Critical SiteGuard WAF Command-Injection Flaw

CVE (5)

People (2)

MITRE ATT&CK (2)

Vendors (4)

Products (3)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.