{
    "id": "CVE-2026-106931",
    "published": "2026-10-14 05:16:42",
    "last_modified": "2026-10-21 15:42:24",
    "cvss_score": "7.8",
    "cvss_severity": "HIGH",
    "cvss_version": "3.0",
    "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-78",
    "description": "SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.",
    "epss_score": "0.02528",
    "epss_percentile": "0.85122",
    "kev": 1,
    "kev_due": "2026-10-23",
    "has_exploit": 0,
    "updated_at": "2026-11-12 18:17:56",
    "priority": {
        "rank": 1,
        "label": "Patch first",
        "why": "On CISA KEV — known exploited in the wild, due 2026-10-23."
    },
    "products": [
        {
            "vendor": "e-guardian",
            "product": "siteguard"
        },
        {
            "vendor": "freebsd",
            "product": "freebsd"
        }
    ],
    "kev_detail": {
        "cve_id": "CVE-2026-106931",
        "date_added": "2026-10-20",
        "due_date": "2026-10-23",
        "vendor": "EG Secure Solutions",
        "product": "SiteGuard Server Edition",
        "name": "EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability",
        "ransomware": 0
    },
    "exploits": [],
    "refs_list": [
        "https://jvn.jp/en/jp/JVN88474777/",
        "https://www.eg-secure.co.jp/siteguard/news/alert-202610-1",
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-106931"
    ]
}