CVE-2026-106931

7.8High

Published 14 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

7.8High

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-78

Impact

A local attacker with low-privilege access can execute arbitrary OS commands as root or SYSTEM. They need prior local access or credentials on the host running the software.

Root cause

Improper neutralization of special elements in OS commands (OS command injection).

Affected systems

Versions not listed — check the vendor advisory.

CVSS v3.0 · CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

Upgrade to the patched version of SiteGuard Server Edition per the vendor advisory; if immediate patching is not possible, restrict local shell and host access to trusted administrators only.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-106931