- High 8.5
- Known exploited (CISA KEV)
CVE-2026-106931
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Scores
The facts
- Published
- 14 October 2026
- Last changed
- 20 October 2026
- NVD status
- Deferred
- Severity
- High, CVSS 8.5 out of 10 (version 4.0)
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R… - Weakness
- Known exploited
- Yes. CISA added it to the Known Exploited Vulnerabilities catalogue on 20 October 2026.
- EPSS
- 0.7% chance of exploitation activity in the next 30 days (percentile 51).
Is there a Securelyn advisory?
Not yet. Securelyn writes plain-English advisories for the flaws that matter most to businesses. Subscribe to the digest to hear about them.