Hackers are exploiting an OS command-injection vulnerability in SiteGuard Server Edition, a web application firewall widely used in Japan, to execute commands with root or SYSTEM privileges on affected systems. The flaw, tracked as CVE-2026-106931, affects the product's statistics function, which is enabled by default, and is rated critical severity by Japan's CERT agency.
organisation
JPCERT/CC
Computer emergency response team for Japan