CVE-2026-106931Published

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

cve-program · CVE-2026-106931

Published

SiteGuard Server Edition for Apache httpd

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "EG Secure Solutions Inc.",
                    "product": "SiteGuard Server Edition for Apache httpd",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "Ver2.20",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "Ver8.00 Update 5"
                        }
                    ]
                }

SiteGuard Server Edition for Nginx

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "EG Secure Solutions Inc.",
                    "product": "SiteGuard Server Edition for Nginx",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "Ver2.20",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "Ver8.00 Update 5"
                        }
                    ]
                }

SiteGuard Server Edition for IIS

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "EG Secure Solutions Inc.",
                    "product": "SiteGuard Server Edition for IIS",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "Ver2.20",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "Ver8.00 Update 5",
                            "changes": [
                                {
                                    "at": "Ver3.10",
                                    "status": "unaffected"
                                },
                                {
                                    "at": "Ver4.00 Update 5",
                                    "status": "affected"
                                }
                            ]
                        }
                    ]
                }

SiteGuard Server Edition for Apache httpd on FreeBSD

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "EG Secure Solutions Inc.",
                    "product": "SiteGuard Server Edition for Apache httpd on FreeBSD",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "Ver2.20",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "Ver7.00 Update 6"
                        }
                    ]
                }

SiteGuard Server Edition for Nginx on FreeBSD

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "EG Secure Solutions Inc.",
                    "product": "SiteGuard Server Edition for Nginx on FreeBSD",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "Ver2.20",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "Ver7.00 Update 6"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON