CVE-2026-106931: SiteGuard Server Edition for Apache httpd Ver2.20 to before Ver8.00 Update 5; +3 more affected products

Affected technology

SiteGuard Server Edition for Apache httpd · Ver2.20 to before Ver8.00 Update 5
EG Secure Solutions Inc.

SiteGuard Server Edition for Nginx · Ver2.20 to before Ver8.00 Update 5
EG Secure Solutions Inc.

SiteGuard Server Edition for IIS · Ver2.20 to before Ver8.00 Update 5; status changes: Ver3.10 — unaffected, Ver4.00 Update 5 — affected
EG Secure Solutions Inc.

SiteGuard Server Edition for Nginx on FreeBSD · Ver2.20 to before Ver7.00 Update 6
EG Secure Solutions Inc.

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

An attacker may execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product. Vendor/CNA’s CVSS 4.0 assessment (base score 8.5/10) rates confidentiality, integrity and availability impact as high.