KEV Entry

CVE-2026-106931

Known Exploited Vulnerability Entry Previdian

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2026-106931

2026-10-15 19:36 UTC

Timestamps

2026-10-15

2026-10-15

Scope

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or... | Affected: EG Secure Solutions / SiteGuard Server Edition for Apache httpd, SiteGuard Server Edition for Nginx, SiteGuard Server Edition for IIS, SiteGuard Server Edition for Apache httpd on FreeBSD, SiteGuard Server Edition for Nginx on FreeBSD | CVSS: 8.5 (HIGH) | EPSS: 0.00662 | Used in malware: unknown | Not yet in CISA KEV: True

References
  • {'id': 'CVE-2026-106931', 'url': 'https://www.cve.org/CVERecord?id=CVE-2026-106931'}
  • {'id': 'previdian', 'url': 'https://previdian.com/CVE-2026-106931'}

6aab41bd-4f6a-43ff-a063-17efe8bbac65

Previdian
caeb2787-0d58-4236-9039-7c86c3e566f3

2026-10-16 21:00 UTC

2026-10-16 21:00 UTC

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
public_report previdian successful_exploitation 0.70
View details 
{
  "added_date": "2026-10-15T19:36:18.244Z",
  "ahead_of_cisa_kev": null,
  "cve_id": "CVE-2026-106931",
  "cvss_estimated": false,
  "cvss_score": 8.5,
  "cvss_severity": "HIGH",
  "epss_percentile": 0.50577,
  "epss_score": 0.00662,
  "feed": "Previdian (previdian.com)",
  "ghsa_id": null,
  "not_yet_in_cisa_kev": true,
  "previous_ids": [],
  "product": "SiteGuard Server Edition for Apache httpd, SiteGuard Server Edition for Nginx, SiteGuard Server Edition for IIS, SiteGuard Server Edition for Apache httpd on FreeBSD, SiteGuard Server Edition for Nginx on FreeBSD",
  "title": "SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or...",
  "used_in_malware": "unknown",
  "vendor": "EG Secure Solutions",
  "virtual_patch": false,
  "vulnerability_id": "CVE-2026-106931"
}
 -
Export Options
JSON Object JSON API View Full Catalog