A critical vulnerability in SiteGuard Server Edition, a web application firewall protecting over 1.5 million websites, is being actively exploited by hackers. The flaw, identified as CVE-2026-106931, allows attackers to inject operating system commands and execute them with root or SYSTEM-level privileges on vulnerable systems. The vulnerability affects the statistics feature, which is enabled by default on host-based WAF instances.
Multiple versions of SiteGuard are vulnerable, including versions 2.20 and later before 8.00 Update 5 for Apache httpd, Nginx, and IIS installations, as well as versions 2.20 through 7.00 Update 6 for FreeBSD systems. The vendor has released patches and a file replacement solution for affected installations. Administrators are advised to preserve diagnostic information before applying updates, as the remediation process may erase evidence of attacks. The vendor notified supported customers about the flaw on September 29.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
