CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
CVSS 8.5 · High⚠ Actively exploited (CISA KEV)
8.5
CVSS score
High
Severity
Active
CISA KEV
No
Ransomware use
Oct 23, 2026
Patch deadline
⚠ Exploited in the wild. CISA added CVE-2026-106931 to its Known Exploited Vulnerabilities catalog on Oct 20, 2026, with a federal patch deadline of Oct 23, 2026 — meaning attackers are actively using it. If you run the affected software, patch it immediately.
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Details
AffectedEG Secure Solutions · SiteGuard Server Edition
WeaknessCWE-78
CVSS base score8.5 (High)
CVSS vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XPublishedOct 14, 2026
Added to CISA KEVOct 20, 2026
Federal patch deadlineOct 23, 2026
Known ransomware useNot documented
Frequently asked questions
Is CVE-2026-106931 being actively exploited?
Yes — CISA lists CVE-2026-106931 in its Known Exploited Vulnerabilities (KEV) catalog, so it is confirmed exploited in the wild. Patch it as a priority.
What does CVE-2026-106931 affect?
CVE-2026-106931 affects EG Secure Solutions · SiteGuard Server Edition.
How do I fix CVE-2026-106931?
Apply the vendor’s patch for the affected software. The federal patch deadline was Oct 23, 2026. Then check whether your personal data was exposed in any related breach.