SiteGuard Server Edition vulnerable to OS command injection

{
  "id": "c936b05d1437c022a87a7d53472a0bf5fb70d740ccd8564cc47e890dcf4859a2",
  "url": "https://jvn.jp/en/jp/JVN88474777/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "SiteGuard Server Edition vulnerable to OS command injection",
    "summary": "SiteGuard Server Edition has an OS command injection vulnerability in its statistics feature, which is enabled by default. The issue may allow arbitrary OS commands to run with root or SYSTEM privileges. The developer states that it is fixed in the listed versions; a patch is also available for users unable to upgrade.",
    "evidence": "The statistics feature of SiteGuard Server Edition contains the following vulnerability: OS command injection (CWE-78)",
    "products": [
      {
        "name": {
          "value": "SiteGuard Server Edition",
          "evidence": "SiteGuard Server Edition provided by EG Secure Solutions Inc. contains an OS command injection vulnerability."
        },
        "prerequisites": [
          {
            "value": "the statistics feature is enabled",
            "evidence": "The product is affected by this vulnerability when the statistics feature is enabled."
          }
        ],
        "fixed_versions": [
          {
            "value": "Ver8.00 Update 5",
            "evidence": "For Apache httpd, Nginx, IIS: Ver8.00 Update 5"
          },
          {
            "value": "Ver7.00 Update 6",
            "evidence": "For Apache httpd and Nginx on FreeBSD: Ver7.00 Update 6"
          }
        ],
        "affected_versions": [
          {
            "value": "Ver2.20 and later versions",
            "evidence": "SiteGuard Server Edition Ver2.20 and later versions"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-106931",
        "evidence": "CVE-2026-106931"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-jvn-english",
  "document_id": 23858,
  "published_at": "2026-10-14T06:15:00+00:00"
}