CVE-2026-106931: e-guardian siteguard

CVSS 8.5 (high) · listed as exploited by CISA since 2026-10-20 · published 2026-10-14

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

Affected products (NVD): e-guardian siteguard

Fixed in (NVD): 8.00, 7.00, 3.10

Weakness: CWE-78

Source: NVD CVE-2026-106931

References

• https://jvn.jp/en/jp/JVN88474777/
• https://www.eg-secure.co.jp/siteguard/news/alert-202610-1
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-106931

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.