CVE-2026-106931

Description

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

Scoring

• CVSS: 7.8 (HIGH, 3.0)
• EPSS exploitation probability: Not yet available
• EPSS percentile: Not yet available

CISA KEV status

• Added to KEV: 2026-10-20
• Remediation due date: 2026-10-23
• Known ransomware campaign use: Unknown

Weakness types (CWE)

• CWE-78

References

• https://jvn.jp/en/jp/JVN88474777/
• https://www.eg-secure.co.jp/siteguard/news/alert-202610-1
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-106931

More from EG Secure Solutions

• No other tracked CVEs for this vendor yet.