CVE-2026-106931 KEV
7.8
HIGH · CVSS 3.0 · EPSS 2.5% (pctl 85)
Patch first
On CISA KEV — known exploited in the wild, due 2026-10-23.
Description
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Scoring
| CVSS | 7.8 (HIGH, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.53% — more likely to be exploited than 85% of all CVEs |
| Weakness | CWE-78 |
| On CISA KEV | yes — remediate by 2026-10-23 |
| Public exploit | none known |
| Published | 2026-10-14 |
| Last modified | 2026-10-21 |
CISA KEV
| Name | EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability |
|---|---|
| Added | 2026-10-20 |
| Due | 2026-10-23 |
| Vendor / product | EG Secure Solutions / SiteGuard Server Edition |
| Ransomware use | none reported |
Affected (2)
| Vendor | Product |
|---|---|
| e-guardian | siteguard |
| freebsd | freebsd |
References
→ the Explorer · watch your stack · NVD