HIGHCVSS v4 8.5Actively exploited · CISA KEV since 2026-10-20Vulnerability

CVE-2026-106931

EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

Properties

Euvd product
SiteGuard Server Edition for Nginx, SiteGuard Server Edition for Apache httpd, SiteGuard Server Edition for Nginx on FreeBSD, SiteGuard Server Edition for IIS, SiteGuard Server Edition for Apache httpd on FreeBSD
Vulnerability name
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
First seen
2026-10-20T19:58:23+00:00
Epss score
0.00662
Cvss score
8.5
Last seen
2026-10-20T19:58:23+00:00
Due date
2026-10-23
Euvd assigner
jpcert
Retrieved at
2026-10-21T01:24:48+00:00
Exploited euvd since
2026-10-20T00:00:00+00:00
Src batch id
euvd-20261021T003401Z-4c0cc1
Date added
2026-10-20
Source url
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100814
Score
8.5
Euvd base score version
4.0
Fetched at
2026-10-21T00:34:02+00:00
Euvd vendor
EG Secure Solutions Inc.
Cvss vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
First seen by Signal
2026-10-18T13:39:00+00:00
Euvd base score
8.5

Related Entities (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-106931 (CVSS v4 8.5) — Ninja Signal Threat Intelligence | Ninja Signal