CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition OS Command Injection
An OS command injection flaw in SiteGuard Server Edition allows attackers to execute arbitrary commands with root or SYSTEM privileges.
- Exploited in the wild
- Since 20 Oct 2026
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-106931?
CVE-2026-106931 is a high-severity command injection vulnerability in SiteGuard Server Edition for Apache httpd, published on 14 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Weakness: CWE-78
Which versions are affected by CVE-2026-106931?
It affects 1 product.
Products include E-Guardian Siteguard.
How do I fix CVE-2026-106931?
No fix has been published for CVE-2026-106931 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 23 Oct 2026.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-106931 being exploited?
Yes. Attackers have exploited CVE-2026-106931 in the wild since at least 20 Oct 2026.
Sources
Also known as GHSA-rhmj-5mp2-rq7c.