OS Command Injection Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 20 Oct 2026.
2.5%
Reading the vendor advisory
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-106931. Nothing runs until you send it.
EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
You are affected if
The fix