Read the docs
TI-2026-73837 Aliases CVE-2026-106931GHSA-rhmj-5mp2-rq7c

OS command injection in EG SiteGuard Server Edition

Priority CRITICAL 96Exploited in the wildCWE-78Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

EG Secure Solutions SiteGuard Server Edition from Ver2.20 before Ver8.00 Update 5 for Apache httpd, Nginx and IIS, and from Ver2.20 before Ver7.00 Update 6 for the FreeBSD editions for Apache httpd and Nginx, contains an OS command injection flaw (CWE-78). A local user with low privileges can execute arbitrary OS commands with root or SYSTEM privileges on the system running the product. The flaw is listed in CISA KEV with a date added of 2026-10-20.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

Why it matters now

Exploitation Active In CISA KEV since 2026-10-20CISA due date 2026-10-23
EPSS 0.02528 84th percentileScored 2026-11-07
Fix Fixed SiteGuard Server Edition for Apache httpd (EG Secure Solutions Inc.): Ver8.00 Update 5SiteGuard Server Edition for Nginx (EG Secure Solutions Inc.): Ver8.00 Update 5+3 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
EG Secure SolutionsSiteGuard Server Edition for Apache httpdVer2.20 to before Ver8.00 Update 5Ver8.00 Update 5Patch availableCNA
EG Secure SolutionsSiteGuard Server Edition for NginxVer2.20 to before Ver8.00 Update 5Ver8.00 Update 5Patch availableCNA
EG Secure SolutionsSiteGuard Server Edition for IISVer2.20 to before Ver8.00 Update 5Ver8.00 Update 5Patch availableCNA
EG Secure SolutionsSiteGuard Server Edition for Apache httpd on FreeBSDVer2.20 to before Ver7.00 Update 6Ver7.00 Update 6Patch availableCNA
EG Secure SolutionsSiteGuard Server Edition for Nginx on FreeBSDVer2.20 to before Ver7.00 Update 6Ver7.00 Update 6Patch availableCNA
  • SiteGuard Server Edition for Apache httpd VendorEG Secure Solutions Affected Ver2.20 to before Ver8.00 Update 5 Fixed in Ver8.00 Update 5 Patch available CNA
  • SiteGuard Server Edition for Nginx VendorEG Secure Solutions Affected Ver2.20 to before Ver8.00 Update 5 Fixed in Ver8.00 Update 5 Patch available CNA
  • SiteGuard Server Edition for IIS VendorEG Secure Solutions Affected Ver2.20 to before Ver8.00 Update 5 Fixed in Ver8.00 Update 5 Patch available CNA
  • SiteGuard Server Edition for Apache httpd on FreeBSD VendorEG Secure Solutions Affected Ver2.20 to before Ver7.00 Update 6 Fixed in Ver7.00 Update 6 Patch available CNA
  • SiteGuard Server Edition for Nginx on FreeBSD VendorEG Secure Solutions Affected Ver2.20 to before Ver7.00 Update 6 Fixed in Ver7.00 Update 6 Patch available CNA

CPE configurations NVD · 27

CPEVersionsRoleVendor
cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:apache:*:*2.20 to before 8.00VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:8.00:-:*:*:server:apache:*:*8.00VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:8.00:update1:*:*:server:apache:*:*8.00 update1VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:8.00:update2:*:*:server:apache:*:*8.00 update2VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:8.00:update3:*:*:server:apache:*:*8.00 update3VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:apache:*:*2.20 to before 7.00VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:7.00:-:*:*:server:apache:*:*7.00VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:7.00:update1:*:*:server:apache:*:*7.00 update1VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:7.00:update2:*:*:server:apache:*:*7.00 update2VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:7.00:update3:*:*:server:apache:*:*7.00 update3VulnerableE-guardian
  • cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:apache:*:* Versions 2.20 to before 8.00 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:8.00:-:*:*:server:apache:*:* Versions 8.00 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:8.00:update1:*:*:server:apache:*:* Versions 8.00 update1 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:8.00:update2:*:*:server:apache:*:* Versions 8.00 update2 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:8.00:update3:*:*:server:apache:*:* Versions 8.00 update3 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:apache:*:* Versions 2.20 to before 7.00 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:7.00:-:*:*:server:apache:*:* Versions 7.00 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:7.00:update1:*:*:server:apache:*:* Versions 7.00 update1 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:7.00:update2:*:*:server:apache:*:* Versions 7.00 update2 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:7.00:update3:*:*:server:apache:*:* Versions 7.00 update3 Vulnerable ·E-guardian
Show 17 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:e-guardian:siteguard:7.00:update4:*:*:server:apache:*:*7.00 update4VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:7.00:update5:*:*:server:apache:*:*7.00 update5VulnerableE-guardian
cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*not specified by NVDRunning onFreeBSD
cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:nginx:*:*2.20 to before 8.00VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:8.00:-:*:*:server:nginx:*:*8.00VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:8.00:update1:*:*:server:nginx:*:*8.00 update1VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:8.00:update2:*:*:server:nginx:*:*8.00 update2VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:8.00:update3:*:*:server:nginx:*:*8.00 update3VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:nginx:*:*2.20 to before 7.00VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:7.00:-:*:*:server:nginx:*:*7.00VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:7.00:update1:*:*:server:nginx:*:*7.00 update1VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:7.00:update2:*:*:server:nginx:*:*7.00 update2VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:7.00:update3:*:*:server:nginx:*:*7.00 update3VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:7.00:update4:*:*:server:nginx:*:*7.00 update4VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:7.00:update5:*:*:server:nginx:*:*7.00 update5VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:internet_information_services:*:*2.20 to before 3.10; 4.10 to before 8.00VulnerableE-guardian
cpe:2.3:a:e-guardian:siteguard:8.00:update4:*:*:server:internet_information_services:*:*8.00 update4VulnerableE-guardian
  • cpe:2.3:a:e-guardian:siteguard:7.00:update4:*:*:server:apache:*:* Versions 7.00 update4 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:7.00:update5:*:*:server:apache:*:* Versions 7.00 update5 Vulnerable ·E-guardian
  • cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FreeBSD
  • cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:nginx:*:* Versions 2.20 to before 8.00 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:8.00:-:*:*:server:nginx:*:* Versions 8.00 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:8.00:update1:*:*:server:nginx:*:* Versions 8.00 update1 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:8.00:update2:*:*:server:nginx:*:* Versions 8.00 update2 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:8.00:update3:*:*:server:nginx:*:* Versions 8.00 update3 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:nginx:*:* Versions 2.20 to before 7.00 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:7.00:-:*:*:server:nginx:*:* Versions 7.00 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:7.00:update1:*:*:server:nginx:*:* Versions 7.00 update1 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:7.00:update2:*:*:server:nginx:*:* Versions 7.00 update2 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:7.00:update3:*:*:server:nginx:*:* Versions 7.00 update3 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:7.00:update4:*:*:server:nginx:*:* Versions 7.00 update4 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:7.00:update5:*:*:server:nginx:*:* Versions 7.00 update5 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:internet_information_services:*:* Versions 2.20 to before 3.10; 4.10 to before 8.00 Vulnerable ·E-guardian
  • cpe:2.3:a:e-guardian:siteguard:8.00:update4:*:*:server:internet_information_services:*:* Versions 8.00 update4 Vulnerable ·E-guardian

Remediation

Upgrade SiteGuard Server Edition for Apache httpd, Nginx and IIS to Ver8.00 Update 5, and the FreeBSD editions for Apache httpd and Nginx to Ver7.00 Update 6. CISA set a KEV due date of 2026-10-23 for this flaw.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA SiteGuard Server Edition for Apache httpd (EG Secure Solutions Inc.) Fixed in Ver8.00 Update 5
  • Fix · CNA SiteGuard Server Edition for Nginx (EG Secure Solutions Inc.) Fixed in Ver8.00 Update 5
  • Fix · CNA SiteGuard Server Edition for IIS (EG Secure Solutions Inc.) Fixed in Ver8.00 Update 5
  • Fix · CNA SiteGuard Server Edition for Apache httpd on FreeBSD (EG Secure Solutions Inc.) Fixed in Ver7.00 Update 6
  • Fix · CNA SiteGuard Server Edition for Nginx on FreeBSD (EG Secure Solutions Inc.) Fixed in Ver7.00 Update 6

Timeline

  1. 2026-10-14 Threatist record created from CVE-2026-106931
  2. 2026-10-14 Alias added: GHSA-rhmj-5mp2-rq7c
  3. 2026-10-14 Fix available: EG Secure Solutions Inc./SiteGuard Server Edition for Apache httpd on [email protected] Update 6 · CNA
  4. 2026-10-14 Priority changed: MEDIUM → LOW
  5. 2026-10-16 CISA SSVC decision points changed
  6. 2026-10-16 Priority changed: LOW → MEDIUM
  7. 2026-10-20 Added to CISA KEV
  8. 2026-10-21 CISA SSVC decision points changed
  9. 2026-10-21 Priority changed: MEDIUM → CRITICAL

References

Advisory 2

  • TI-2024-25198 Open redirect in EG Secure Solutions SiteGuard WP Plugin CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences