Vulnerability Intelligence Report
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
CVE-2026-106931
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
CISA KEV
SSVC: Active Exploitation
Injection
CVSS Base Score
7.8
HIGH
Exploitability:1.9
Impact Score:5.9
EPSS Probability:0.66%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-78 ↗Improper neutralization of special elements used in an OS command ('OS Command Injection')
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| EG Secure Solutions Inc. | SiteGuard Server Edition for Apache httpd | Ver2.20 < Ver8.00 Update 5 (affected) |
| EG Secure Solutions Inc. | SiteGuard Server Edition for Nginx | Ver2.20 < Ver8.00 Update 5 (affected) |
| EG Secure Solutions Inc. | SiteGuard Server Edition for IIS | Ver2.20 < Ver8.00 Update 5 (affected) |
| EG Secure Solutions Inc. | SiteGuard Server Edition for Apache httpd on FreeBSD | Ver2.20 < Ver7.00 Update 6 (affected) |
| EG Secure Solutions Inc. | SiteGuard Server Edition for Nginx on FreeBSD | Ver2.20 < Ver7.00 Update 6 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
CISA KEV
ACTIVE IN CATALOG
EPSS Score
0.662%
GitHub Advisory
Vulnerability Class
Injection
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | JPCERT/CC · CERT · Japan |
| Reserved | 2026-10-07T04:50:26 |
| Published | 2026-10-14T04:45:07 |
| Last Updated | 2026-10-20T19:58:23 |
Community Chatter & Buzz