CVE-2026-106931 in SiteGuard: command injection already exploited

EG Secure Solutions' SiteGuard Server Edition WAF has an OS command injection (CWE-78) in its statistics feature, scored CVSS 4.0 8.5 and CVSS 3.0 7.8. Exploitation yields root or SYSTEM command execution on the hosting server, and the flaw is already being exploited. Fixes are 8.00 Update 5 and 7.00 Update 6.

• Versions Ver2.20 and later are affected when statistics is enabled, which is the default
• Exploitation gives root or SYSTEM access on the hosting server
• Patches: 8.00 Update 5 for Apache, Nginx and IIS, 7.00 Update 6 for FreeBSD
• ZoomEye sees 507 SiteGuard hosts and 0 matches for the CVE