CVE-2026-106931

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 1/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

CISA Known Exploited Vulnerability

Vendor / Product EG Secure Solutions — SiteGuard Server Edition
Date Added 2026-10-20
Remediation Due 2026-10-23
https://www.eg-secure.co.jp/siteguard/news/alert-202610-1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-106931

Weakness Classification (1)

Bug Bounty Relevance

1 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

2.53%
Raw Score 0.025280
Percentile 84.8%
Date 2026-10-28

Intelligence Sources

kev ref →