CVE-2026-106931SiteGuard Server Edition for Apache httpd OS Command Injection
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Published Oct 14, 2026 · Updated Oct 16, 2026 · Also known as EUVD-2026-100814, GHSA-rhmj-5mp2-rq7c, JVN#88474777, JVNDB-2026-000148
Key Facts
Patch immediately- CVE-2026-106931 is a high-severity vulnerability (CVSS 8.5 v4) affecting SiteGuard Server Edition for Apache httpd, SiteGuard Server Edition for Apache httpd on FreeBSD, SiteGuard Server Edition for IIS and 2 more products.
- It is exploited in the wild, listed in CIRCL KEV, Industry KEV feed since Oct 14, 2026. No public exploit code is known.
- EPSS estimates a 0.7% probability of exploitation in the next 30 days.
- Fixed versions are available, including SiteGuard Server Edition for Apache httpd Ver8.00 Update 5, SiteGuard Server Edition for Apache httpd on FreeBSD Ver7.00 Update 6, SiteGuard Server Edition for IIS Ver3.10.
- Brandefense priority: patch immediately, because it is listed as exploited in the wild.
Scores
CVSS v4
8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS (30-day exploit likelihood)
0.7%
Exploit maturity
None known
ATLAS score
24/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Oct 14, 2026
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
None known
Public exploit code
0
Proof-of-concept links
In-the-wild evidence
0
Reports of active use
Advisories And Exploit References
- advisoryJVN JVNDB-2026-000148
Description
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Known-Exploited Catalog Listings
| Catalog | Added | Remediation due | Ransomware use |
|---|---|---|---|
| CIRCL KEV | Oct 14, 2026 | n/a | Not reported |
| Industry KEV feed | Oct 14, 2026 | n/a | Not reported |
Affected Products
11 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| SiteGuard Server Edition for Apache httpd | >= Ver2.20 | Ver8.00 Update 5 |
| SiteGuard Server Edition for Apache httpd on FreeBSD | >= Ver2.20 | Ver7.00 Update 6 |
| SiteGuard Server Edition for IIS | >= Ver2.20 | Ver8.00 Update 5 |
| SiteGuard Server Edition for Nginx | >= Ver2.20 | Ver8.00 Update 5 |
| SiteGuard Server Edition for Nginx on FreeBSD | >= Ver2.20 | Ver7.00 Update 6 |
Patched Releases
SiteGuard Server Edition for Apache httpd
Ver8.00 Update 5
SiteGuard Server Edition for Apache httpd on FreeBSD
Ver7.00 Update 6
SiteGuard Server Edition for IIS
Ver3.10, Ver8.00 Update 5
SiteGuard Server Edition for Nginx
Ver8.00 Update 5
SiteGuard Server Edition for Nginx on FreeBSD
Ver7.00 Update 6
Timeline
Publicly disclosed
Oct 14, 2026
Added to CIRCL KEV
Oct 14, 2026
Added to Industry KEV feed
Oct 14, 2026
Last updated
Oct 16, 2026
Weakness Type
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
References
- advisoryJVN JVNDB-2026-000148
- otherjvn.jp · JVN88474777
- otherVulnCheck exploitation report
FAQ
Common Questions.
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Affected: SiteGuard Server Edition for Apache httpd versions >= Ver2.20; SiteGuard Server Edition for Apache httpd on FreeBSD versions >= Ver2.20; SiteGuard Server Edition for IIS versions >= Ver2.20, among others. The full list is in the CVE brief.
It is exploited in the wild, listed in CIRCL KEV, Industry KEV feed since Oct 14, 2026.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including SiteGuard Server Edition for Apache httpd Ver8.00 Update 5, SiteGuard Server Edition for Apache httpd on FreeBSD Ver7.00 Update 6, SiteGuard Server Edition for IIS Ver3.10.
Brandefense priority: patch immediately, because it is listed as exploited in the wild.
Is CVE-2026-106931 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo