Security Alert: OS Command Injection Vulnerability in SiteGuard Server Edition (CVE)

JPCERT-AT-2026-0032 JPCERT/CC October 14, 2026 EG Secure Solutions Co., Ltd. Vulnerability in OS Command Injection on SiteGuard Server Edition (Urgent) https://www.eg-secure.co.jp/siteguard/news/alert-202610-1 JPCERT/CC has confirmed that this product is widely used in Japan. If you are using a product affected by this vulnerability, please review the information provided from Section III. Countermeasures onwards and consider implementing countermeasures and investigating any compromises. The following versions of SiteGuard Server Edition Ver2.20 and later are affected: - Apache, Nginx, IIS versions: Versions prior to Ver8.00 Update5 - FreeBSD Apache, Nginx versions: Versions prior to Ver7.00 Update6 This vulnerability is affected when the statistics function, which is enabled by default in the product, is active. However, for the IIS version, versions from Ver3.10 to Ver4.00 Update4 are not affected by this vulnerability. Japan Vulnerability Notes JVN#88474777 Vulnerability in OS Command Injection on SiteGuard Server Edition https://jvn.jp/jp/JVN88474777/ If you have any information regarding this matter, please contact JPCERT/CC. Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) Cybersecurity Coordination Group Email: ew-info@jpcert.or.jp JPCERT/CC October 14, 2026 I. Overview On October 14, 2026, EG Secure Solutions Co., Ltd. disclosed a vulnerability in SiteGuard Server Edition involving OS Command Injection (CVE-2026-106931). Exploitation of this vulnerability could allow arbitrary OS commands to be executed with root or SYSTEM privileges on the server running the product. EG Secure Solutions Co., Ltd. has confirmed exploitation of this vulnerability. EG Secure Solutions Co., Ltd. Vulnerability in OS Command Injection on SiteGuard Server Edition (Urgent) https://www.eg-secure.co.jp/siteguard/news/alert-202610-1 JPCERT/CC has confirmed that this product is widely used in Japan. If you are using a product affected by this vulnerability, please review the information provided from Section III. Countermeasures onwards and consider implementing countermeasures and investigating any compromises. II. Affected Products The products and versions affected by this vulnerability are as follows. Please check the latest information provided by EG Secure Solutions Co., Ltd. for details. SiteGuard Server Edition Ver2.20 and later: - Apache, Nginx, IIS versions: Versions prior to Ver8.00 Update5 - FreeBSD Apache, Nginx versions: Versions prior to Ver7.00 Update6 This vulnerability is affected when the statistics function, which is enabled by default in the product, is active. However, for the IIS version, versions from Ver3.10 to Ver4.00 Update4 are not affected by this vulnerability. III. Countermeasures EG Secure Solutions Co., Ltd. recommends updating to a version that fixes this vulnerability. Additionally, patches are available for users who have difficulty upgrading, allowing them to replace the files targeted by statistics processing. Please check the latest information provided by the developer for details. IV. Workarounds The impact of this vulnerability can be avoided by disabling the statistics function. For detailed instructions on how to disable it, please check the latest information provided by EG Secure Solutions Co., Ltd. V. Notes on Updates EG Secure Solutions Co., Ltd. reports that after updating to a version that fixes this vulnerability, traces of an attack may be deleted. Therefore, guidance is provided on how to preserve evidence in case of an attack. If you are using the affected versions, it is recommended to obtain "Diagnostic Information" from the SiteGuard Server Edition web administration screen and update while preserving evidence of the attack. Please check the latest information provided by EG Secure Solutions Co., Ltd. for details. VI. References Japan Vulnerability Notes JVN#88474777 Vulnerability in OS Command Injection on SiteGuard Server Edition https://jvn.jp/jp/JVN88474777/ If you have any information regarding this matter, please contact JPCERT/CC. Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) Cybersecurity Coordination Group Email: ew-info@jpcert.or.jp