CVE-2026-106931
En bref Sévérité HIGH 8.5 Exploitation Exploitation connue (CISA KEV) · ajoutée le 2026-10-20 Exploitée selon l'ENISA depuis le 2026-10-20 EPSS EPSS 2.53 % · centile 85 (2026-10-27) État PUBLISHED Publiée 2026-10-14 Mise à jour 2026-10-21 Attribuée par jpcert Statut NVD Analyzed Description SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Scores Version Score Vecteur Évalué par CVSS 3.0 HIGH 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H jpcert CVSS 4.0 HIGH 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N jpcert CVSS 4.0 HIGH 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X NVD · vultures@jpcert.or.jp (Secondary) CVSS 3.0 HIGH 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · vultures@jpcert.or.jp (Secondary)
Faiblesses (CWE)
Références européennes
Configurations affectées (CPE NVD) cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:apache:*:* ≥ 2.20 < 8.00cpe:2.3:a:e-guardian:siteguard:8.00:-:*:*:server:apache:*:*cpe:2.3:a:e-guardian:siteguard:8.00:update1:*:*:server:apache:*:*cpe:2.3:a:e-guardian:siteguard:8.00:update2:*:*:server:apache:*:*cpe:2.3:a:e-guardian:siteguard:8.00:update3:*:*:server:apache:*:*cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:apache:*:* ≥ 2.20 < 7.00cpe:2.3:a:e-guardian:siteguard:7.00:-:*:*:server:apache:*:*cpe:2.3:a:e-guardian:siteguard:7.00:update1:*:*:server:apache:*:*cpe:2.3:a:e-guardian:siteguard:7.00:update2:*:*:server:apache:*:*cpe:2.3:a:e-guardian:siteguard:7.00:update3:*:*:server:apache:*:*cpe:2.3:a:e-guardian:siteguard:7.00:update4:*:*:server:apache:*:*cpe:2.3:a:e-guardian:siteguard:7.00:update5:*:*:server:apache:*:*cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:nginx:*:* ≥ 2.20 < 8.00cpe:2.3:a:e-guardian:siteguard:8.00:-:*:*:server:nginx:*:*cpe:2.3:a:e-guardian:siteguard:8.00:update1:*:*:server:nginx:*:*cpe:2.3:a:e-guardian:siteguard:8.00:update2:*:*:server:nginx:*:*cpe:2.3:a:e-guardian:siteguard:8.00:update3:*:*:server:nginx:*:*cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:nginx:*:* ≥ 2.20 < 7.00cpe:2.3:a:e-guardian:siteguard:7.00:-:*:*:server:nginx:*:*cpe:2.3:a:e-guardian:siteguard:7.00:update1:*:*:server:nginx:*:*cpe:2.3:a:e-guardian:siteguard:7.00:update2:*:*:server:nginx:*:*cpe:2.3:a:e-guardian:siteguard:7.00:update3:*:*:server:nginx:*:*cpe:2.3:a:e-guardian:siteguard:7.00:update4:*:*:server:nginx:*:*cpe:2.3:a:e-guardian:siteguard:7.00:update5:*:*:server:nginx:*:*cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:internet_information_services:*:* ≥ 2.20 < 3.10cpe:2.3:a:e-guardian:siteguard:*:*:*:*:server:internet_information_services:*:* ≥ 4.10 < 8.00cpe:2.3:a:e-guardian:siteguard:8.00:update4:*:*:server:internet_information_services:*:*Produits affectés
Références
Sources
