CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-96652 Plex Media Server Server-Side Request Forgery SSRF Vulnerability CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a...

EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...

SiteGuard Server Edition vulnerable to OS command injection

Overview SiteGuard Server Edition provided by EG Secure Solutions Inc. is a host-based Web Application Firewall WAF designed to be integrated into a web server. The statistics feature of SiteGuard Server Edition contains the following vulnerability: OS command injection CWE-78 - CVE-2026-106931...

CVE-2026-106931

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...

EUVD-2026-100814

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...

CVE-2026-106931

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...

CVE-2026-106931

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...

CVE-2026-106931

SiteGuard Server Edition versions 2.20 through 8.00 Update4 contain an OS command injection vulnerability within the statistics feature, which is enabled by default. A local attacker with low-privileged account access can exploit this flaw to execute arbitrary commands with root or SYSTEM privile...

PT-2026-113640

Name of the Vulnerable Software and Affected Versions SiteGuard Server Edition versions 2.20 through 8.00 Update 4 Apache httpd, Nginx, and IIS outside FreeBSD SiteGuard Server Edition versions 2.20 through 7.00 Update 5 Apache httpd and Nginx on FreeBSD Description SiteGuard Server Edition...

CVE-2026-106931: Improper Neutralization of Special Elements used in an OS Command

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...

VulnCheck KEV: CVE-2026-106931

EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...

EG Secure Solutions SiteGuard Server Edition for Apache httpd: Command injection vulnerability

EG Secure Solutions SiteGuard Server Edition for Apache httpd has a command injection vulnerability. This vulnerability stems from OS command injection, and it may allow attackers to execute arbitrary OS commands with root or SYSTEM privileges on the system where the affected product is running...