CVE-2026-106931

🗓️ 14 Oct 2026 04:45:07Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 152 Views

OS command injection in SiteGuard Server Edition allows execution with root or SYSTEM privileges.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2026-106931	13 Oct 202619:00	–	circl
CISA KEV Catalog	EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability	20 Oct 202600:00	–	cisa_kev
CISA	CISA Adds Six Known Exploited Vulnerabilities to Catalog	20 Oct 202612:00	–	cisa
CNNVD	EG Secure Solutions SiteGuard Server Edition for Apache httpd: Command injection vulnerability	13 Oct 202616:00	–	cnnvd
Cvelist	CVE-2026-106931	14 Oct 202604:45	–	cvelist
EUVD	EUVD-2026-100814	14 Oct 202604:45	–	euvd
Japan Vulnerability Notes	SiteGuard Server Edition vulnerable to OS command injection	14 Oct 202608:37	–	jvn
NVD	CVE-2026-106931	14 Oct 202605:16	–	nvd
Positive Technologies	PT-2026-113640	14 Oct 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-106931: Improper Neutralization of Special Elements used in an OS Command	14 Oct 202600:00	–	rapid7

NVD

Vulners

Node

e-guardian siteguardRange2.20–8.00serverapache

e-guardian siteguardMatch8.00-serverapache

e-guardian siteguardMatch8.00update1serverapache

e-guardian siteguardMatch8.00update2serverapache

e-guardian siteguardMatch8.00update3serverapache

Node

AND

e-guardian siteguardRange2.20–7.00serverapache

e-guardian siteguardMatch7.00-serverapache

e-guardian siteguardMatch7.00update1serverapache

e-guardian siteguardMatch7.00update2serverapache

e-guardian siteguardMatch7.00update3serverapache

e-guardian siteguardMatch7.00update4serverapache

e-guardian siteguardMatch7.00update5serverapache

freebsd freebsdMatch-

Node

e-guardian siteguardRange2.20–8.00servernginx

e-guardian siteguardMatch8.00-servernginx

e-guardian siteguardMatch8.00update1servernginx

e-guardian siteguardMatch8.00update2servernginx

e-guardian siteguardMatch8.00update3servernginx

Node

AND

e-guardian siteguardRange2.20–7.00servernginx

e-guardian siteguardMatch7.00-servernginx

e-guardian siteguardMatch7.00update1servernginx

e-guardian siteguardMatch7.00update2servernginx

e-guardian siteguardMatch7.00update3servernginx

e-guardian siteguardMatch7.00update4servernginx

e-guardian siteguardMatch7.00update5servernginx

freebsd freebsdMatch-

Node

e-guardian siteguardRange2.20–3.10serverinternet_information_services

e-guardian siteguardRange4.10–8.00serverinternet_information_services

e-guardian siteguardMatch8.00update4serverinternet_information_services

[
  {
    "vendor": "EG Secure Solutions Inc.",
    "product": "SiteGuard Server Edition for Apache httpd",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "Ver2.20",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "Ver8.00 Update 5"
      }
    ]
  },
  {
    "vendor": "EG Secure Solutions Inc.",
    "product": "SiteGuard Server Edition for Nginx",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "Ver2.20",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "Ver8.00 Update 5"
      }
    ]
  },
  {
    "vendor": "EG Secure Solutions Inc.",
    "product": "SiteGuard Server Edition for IIS",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "Ver2.20",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "Ver8.00 Update 5",
        "changes": [
          {
            "at": "Ver3.10",
            "status": "unaffected"
          },
          {
            "at": "Ver4.00 Update 5",
            "status": "affected"
          }
        ]
      }
    ]
  },
  {
    "vendor": "EG Secure Solutions Inc.",
    "product": "SiteGuard Server Edition for Apache httpd on FreeBSD",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "Ver2.20",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "Ver7.00 Update 6"
      }
    ]
  },
  {
    "vendor": "EG Secure Solutions Inc.",
    "product": "SiteGuard Server Edition for Nginx on FreeBSD",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "Ver2.20",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "Ver7.00 Update 6"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/jp/JVN88474777/
eg-secure	www.eg-secure.co.jp/siteguard/news/alert-202610-1
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

21 Oct 2026 15:42Current

7.8High risk

Vulners AI Score7.8

CVSS 37.8

CVSS 48.5

EPSS0.02528

SSVC