CVE-2026-106931

High7.8 Published on Oct 14, 2026

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

Early warning: exploitation observed

Exploitation observed since Oct 14, 2026
Not yet in the official CISA catalogue
Attacked on the day of disclosure

Source: VulnCheck KEV · Oct 14, 2026

CVSS score7.8 / 10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-78

Vulnerabilities

SiteGuard WAF flaw CVE-2026-106931 is under active exploitation

SiteGuard WAF flaw under active exploitation via statistics feature, risking root or SYSTEM command execution.

Oct 18, 202615:41 2 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

CVE-2026-106931

Early warning: exploitation observed

Related articles

SiteGuard WAF flaw CVE-2026-106931 is under active exploitation

Audience measurement