CISA added CVE-2026-106931 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects EG Secure Solutions SiteGuard Server Edition and is an OS command injection flaw that may let an attacker run arbitrary operating system commands with root or SYSTEM privileges.
The flaw could give an attacker high-level control of a system running the affected product. The supplied data does not specify the attack vector or further technical details. CVE-2026-106931 has a CVSS score of 8.5, rated HIGH. Patch availability is unknown; the KEV data provides no patch status, and no patch or advisory URL was supplied.
CISA’s KEV listing indicates that exploitation has been confirmed. The data does not confirm whether attackers have used the vulnerability in ransomware campaigns. CISA set 23 October 2026 as the remediation deadline for affected Federal Civilian Executive Branch (FCEB) agencies.
CISA requires organisations to “apply mitigations in accordance with vendor instructions”, following applicable BOD 26-04 guidance and CISA’s Forensics Triage Requirements. For cloud services, organisations should follow applicable BOD 26-04 guidance; if mitigations are unavailable, they should discontinue use of the product. Stakeholders must assess each asset’s internet exposure and meet BOD 26-04 patching guidelines. These requirements apply directly to FCEB agencies, but all organisations should review their exposure and follow the vendor’s advisory.
See the [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-106931) and [CISA KEV catalogue](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) for full details.