PatchTheCEVCVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
69
Patch now
HIGH 7.8EXPLOITEDUPGRADEUPGRADEUPGRADE
CVE-2026-106931 is a high-severity flaw (CVSS 7.8) affecting siteguard, siteguard, siteguard, reported as exploited in the wild. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Why this priority
- High severity
- Exploited in the wild (CISA KEV)
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 1.2% (top 33%) |
| CISA exploited list | Yes, fix due 2026-10-23 |
| Weakness | CWE-78 |
| Published | 2026-10-14 |
| Last modified | 2026-10-21 |
Publisher (CNA): JPCERT/CC · Vendor: e-guardian
Am I affected?
Timeline
- Published CVE record published
- Exploited Added to the CISA Known Exploited Vulnerabilities list
- Updated Record last modified
- Deadline CISA due date for US federal agencies to patch
e-guardian siteguard UPGRADE
Affected: >= 2.20 and < 8.00 · 8.00 · 8.00 update1 · 8.00 update2 · 8.00 update3 · >= 2.20 and < 7.00 · 7.00 · 7.00 update1
Fixed in: 7.00, 8.00
Safe to downgrade to: a release before 2.20
1. Check installed version
apt-cache policy siteguard || rpm -q siteguard || siteguard --version
2. UPGRADE to 7.00 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade siteguard
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade siteguard
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 2.20 (Debian / Ubuntu)
apt-cache madison siteguard
sudo apt install siteguard=<VERSION_BEFORE_2.20>
sudo apt-mark hold siteguard
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list siteguard
sudo dnf downgrade siteguard-<VERSION_BEFORE_2.20>
sudo dnf versionlock add siteguard
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
e-guardian siteguard UPGRADE
Affected: >= 2.20 and < 8.00 · 8.00 · 8.00 update1 · 8.00 update2 · 8.00 update3 · >= 2.20 and < 7.00 · 7.00 · 7.00 update1
Fixed in: 7.00, 8.00
Safe to downgrade to: a release before 2.20
1. Check installed version
apt-cache policy siteguard || rpm -q siteguard || siteguard --version
2. UPGRADE to 7.00 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade siteguard
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade siteguard
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 2.20 (Debian / Ubuntu)
apt-cache madison siteguard
sudo apt install siteguard=<VERSION_BEFORE_2.20>
sudo apt-mark hold siteguard
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list siteguard
sudo dnf downgrade siteguard-<VERSION_BEFORE_2.20>
sudo dnf versionlock add siteguard
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
e-guardian siteguard UPGRADE
Affected: >= 2.20 and < 3.10 · >= 4.10 and < 8.00 · 8.00 update4
Fixed in: 3.10, 8.00
Safe to downgrade to: a release before 2.20
1. Check installed version
apt-cache policy siteguard || rpm -q siteguard || siteguard --version
2. UPGRADE to 3.10 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade siteguard
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade siteguard
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 2.20 (Debian / Ubuntu)
apt-cache madison siteguard
sudo apt install siteguard=<VERSION_BEFORE_2.20>
sudo apt-mark hold siteguard
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list siteguard
sudo dnf downgrade siteguard-<VERSION_BEFORE_2.20>
sudo dnf versionlock add siteguard
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Exact fixes by distribution
Fedora 46 · retext · FIXED · 8.1.0-1.fc46 · FEDORA-2026-0602a84203 · source
sudo dnf upgrade --advisory=FEDORA-2026-0602a84203
Advisories and coverage
Official advisories
- CISA Alerts and Advisories: CISA Adds Six Known Exploited Vulnerabilities to Catalog 2026-10-20
Verify at the official source NVD · CVE Program · CISA KEV catalog · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.