SiteGuard WAF command injection CVE-2026-106931 exploited for root
JPCERT/CC and vendor EG Secure confirm active exploitation of CVE-2026-106931, an OS command injection in SiteGuard Server Edition WAF that runs commands as root/SYSTEM. Fixes shipped.