cvelistv5 - cve-2026-106931

CVE-2026-106931 (GCVE-0-2026-106931)

Vulnerability from cvelistv5

Published

2026-10-14 04:45

Modified

2026-10-21 03:56

Severity ?

7.8 (High) - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.5 (High) - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-78 - Improper neutralization of special elements used in an OS command ('OS Command Injection')

Summary

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

References

URL

CISA Known Exploited Vulnerability

Data from the CISA Known Exploited Vulnerabilities Catalog

Date added: 2026-10-20

Due date: 2026-10-23

Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Used in ransomware: Unknown

Notes: https://www.eg-secure.co.jp/siteguard/news/alert-202610-1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-106931

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-106931",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-20T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-10-20",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-106931"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-21T03:56:27.300Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-106931"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-10-20T00:00:00.000Z",
            "value": "CVE-2026-106931 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "SiteGuard Server Edition for Apache httpd",
          "vendor": "EG Secure Solutions Inc.",
          "versions": [
            {
              "lessThan": "Ver8.00 Update 5",
              "status": "affected",
              "version": "Ver2.20",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SiteGuard Server Edition for Nginx",
          "vendor": "EG Secure Solutions Inc.",
          "versions": [
            {
              "lessThan": "Ver8.00 Update 5",
              "status": "affected",
              "version": "Ver2.20",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SiteGuard Server Edition for IIS",
          "vendor": "EG Secure Solutions Inc.",
          "versions": [
            {
              "changes": [
                {
                  "at": "Ver3.10",
                  "status": "unaffected"
                },
                {
                  "at": "Ver4.00 Update 5",
                  "status": "affected"
                }
              ],
              "lessThan": "Ver8.00 Update 5",
              "status": "affected",
              "version": "Ver2.20",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SiteGuard Server Edition for Apache httpd on FreeBSD",
          "vendor": "EG Secure Solutions Inc.",
          "versions": [
            {
              "lessThan": "Ver7.00 Update 6",
              "status": "affected",
              "version": "Ver2.20",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SiteGuard Server Edition for Nginx on FreeBSD",
          "vendor": "EG Secure Solutions Inc.",
          "versions": [
            {
              "lessThan": "Ver7.00 Update 6",
              "status": "affected",
              "version": "Ver2.20",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper neutralization of special elements used in an OS command (\u0027OS Command Injection\u0027)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T09:09:32.417Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://www.eg-secure.co.jp/siteguard/news/alert-202610-1"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN88474777/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2026-106931",
    "datePublished": "2026-10-14T04:45:07.678Z",
    "dateReserved": "2026-10-07T04:50:26.138Z",
    "dateUpdated": "2026-10-21T03:56:27.300Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2026-106931",
      "cwes": "[\"CWE-78\"]",
      "dateAdded": "2026-10-20",
      "dueDate": "2026-10-23",
      "forensicTriage": "Yes",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://www.eg-secure.co.jp/siteguard/news/alert-202610-1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-106931",
      "product": "SiteGuard Server Edition",
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
      "shortDescription": "EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.",
      "vendorProject": "EG Secure Solutions",
      "vulnerabilityName": "EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-106931\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-10-20T19:46:31.419792Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2026-10-20\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-106931\"}}}], \"references\": [{\"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-106931\", \"tags\": [\"government-resource\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-10-16T15:29:49.735Z\"}, \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-10-20T00:00:00.000Z\", \"value\": \"CVE-2026-106931 added to CISA KEV\"}]}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_0\": {\"version\": \"3.0\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 8.5, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"EG Secure Solutions Inc.\", \"product\": \"SiteGuard Server Edition for Apache httpd\", \"versions\": [{\"status\": \"affected\", \"version\": \"Ver2.20\", \"lessThan\": \"Ver8.00 Update 5\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"EG Secure Solutions Inc.\", \"product\": \"SiteGuard Server Edition for Nginx\", \"versions\": [{\"status\": \"affected\", \"version\": \"Ver2.20\", \"lessThan\": \"Ver8.00 Update 5\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"EG Secure Solutions Inc.\", \"product\": \"SiteGuard Server Edition for IIS\", \"versions\": [{\"status\": \"affected\", \"changes\": [{\"at\": \"Ver3.10\", \"status\": \"unaffected\"}, {\"at\": \"Ver4.00 Update 5\", \"status\": \"affected\"}], \"version\": \"Ver2.20\", \"lessThan\": \"Ver8.00 Update 5\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"EG Secure Solutions Inc.\", \"product\": \"SiteGuard Server Edition for Apache httpd on FreeBSD\", \"versions\": [{\"status\": \"affected\", \"version\": \"Ver2.20\", \"lessThan\": \"Ver7.00 Update 6\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"EG Secure Solutions Inc.\", \"product\": \"SiteGuard Server Edition for Nginx on FreeBSD\", \"versions\": [{\"status\": \"affected\", \"version\": \"Ver2.20\", \"lessThan\": \"Ver7.00 Update 6\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.eg-secure.co.jp/siteguard/news/alert-202610-1\"}, {\"url\": \"https://jvn.jp/en/jp/JVN88474777/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-78\", \"description\": \"Improper neutralization of special elements used in an OS command (\u0027OS Command Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"shortName\": \"jpcert\", \"dateUpdated\": \"2026-10-14T09:09:32.417Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-106931\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-10-21T03:56:27.300Z\", \"dateReserved\": \"2026-10-07T04:50:26.138Z\", \"assignerOrgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"datePublished\": \"2026-10-14T04:45:07.678Z\", \"assignerShortName\": \"jpcert\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

cve-2026-106931

Vulnerability from jvndb

Published

2026-10-14 17:37

Modified

2026-10-14 17:37

Severity ?

7.8 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

SiteGuard Server Edition vulnerable to OS command injection

Details

SiteGuard Server Edition provided by EG Secure Solutions Inc. is a host-based Web Application Firewall (WAF) designed to be integrated into a web server. The statistics feature of SiteGuard Server Edition contains the following vulnerability:<a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a> <ul><li>OS command injection (CWE-78) - CVE-2026-106931</li></ul>Note that the vulnerability has been confirmed to be exploited in the wild. The developer reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

References

Type

URL

	JVN	https://jvn.jp/en/jp/JVN88474777/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2026-106931
	JPCERT AT	https://www.jpcert.or.jp/at/2026/at260032.html
	OS Command Injection(CWE-78)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

EG Secure Solutions Inc.

SiteGuard Server Edition

Show details on JVN DB website