CVE-2026-106931
KEVEG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
8.5
HighPublished:
Last updated:
Source:vultures@jpcert.or.jp
Analyzed
Weakness (CWE)
CVSS Vector
v4.0- Attack Vector
- Local
- Attack Complexity
- Low
- Attack Requirements
- None
- Privileges Required
- Low
- User Interaction
- None
- Confidentiality (Vulnerable)
- High
- Integrity (Vulnerable)
- High
- Availability (Vulnerable)
- High
- Confidentiality (Subsequent)
- None
- Integrity (Subsequent)
- None
- Availability (Subsequent)
- None
Description
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
References
vultures@jpcert.or.jp
https://jvn.jp/en/jp/JVN88474777/vultures@jpcert.or.jp
https://www.eg-secure.co.jp/siteguard/news/alert-202610-1134c704f-9b21-4f2e-91b3-4a467353bcc0
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-106931