SiteGuard Server Edition

Reported Context (4)

The second security flaw is a command injection bug in EG Secure Solutions SiteGuard Server Edition (CVE-2026-106931, CVSS score: 8.5) that the Japanese company confirmed as being exploited. No additional details CISA Sets Patch Deadlines for Exploited Plex2Shell, Siemens and SiteGuard Flaws
CISA has also added CVE-2026-106931 to KEV, an OS command injection flaw that affects affecting the SiteGuard Server Edition web application firewall (WAF). CISA Warns of Active Exploitation of Plex2Shell and Other Flaws
CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability CISA Adds Six Actively Exploited Vulnerabilities to KEV Catalog
Hackers are exploiting an OS command-injection vulnerability in the SiteGuard Server Edition web application firewall (WAF), allowing them to execute commands with root or SYSTEM privileges on affected machines. Hackers Exploit Critical SiteGuard WAF Command-Injection Flaw

CVE (6)

People (2)

MITRE ATT&CK (2)

Vendors (4)

Products (2)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.