CYBER CODE RED

Get real-time updates on Telegram

VULNERABILITYBleepingComputer

Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root

Hackers are exploiting an OS command-injection vulnerability in the SiteGuard Server Edition web application firewall (WAF), allowing them to execute commands with root or SYSTEM privileges on affected machines. The security issue is tracked as CVE-2026-106931 and affects the statistics feature in host-based WAF instances, which is enabled by default. SiteGuard is a leading Japanese WAF vendor that claims to protect more than 1.5 million websites. Based on WordPress.org statistics, the product is active on 500,000 sites.

Published 18-Oct-2026 15:27 UTC · First seen 18-Oct-2026 15:27 UTC

Sources