CVE-2026-106931: Command Injection
Published Oct 14, 2026
·Updated
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Affected Software
1 affected component
JP-Secure SiteGuard Server Edition
Event History
Oct 14, 2026
CVE Published
via MITRE·04:45 AM
Data Sourced
via MITRE·04:45 AM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation requires local access and low privileges on the affected system. No user interaction is required.
2
Is this an unauthenticated remote attack?
No. The published vector lists attack vector as local and privileges required as low, rather than network-based unauthenticated access.
3
Does exploitation cross into another security authority?
The CVSS vector lists scope as unchanged. The impact is assessed within the security authority of the system running the affected product.