SiteGuard Server Edition

Search everything

Mentions · 7d0
Mentions · 30d7
All mentions7
First seenOct 18, 2026
Last mentioned9d ago

Timeline

7 articles · newest first

CISA says attackers chain Plex flaws in Plex2Shell server breaches

Federal agencies must patch or mitigate by October 23; honeypots were hit with a cryptominer.

BleepingComputerOct 21, 18:34 UTC · 9d agoExploit / PoCExploitedCVE-2026-96652 CVE-2026-96654 CVE-2026-96655+3

CISA adds six exploited vulnerabilities to the KEV catalog

The entries cover four Plex Media Server bugs, SiteGuard command injection, and a Siemens path flaw.

CISA AdvisoriesOct 20, 12:00 UTC · 10d agoExploit / PoCExploitedCVE-2026-96652 CVE-2026-96654 CVE-2026-96655+34 · 1 read

CISA adds SiteGuard OS command injection to KEV (CVE-2026-106931)

Federal agencies must mitigate EG Secure Solutions SiteGuard Server Edition by October 23, 2026; ransomware use is unknown.

CISA Known Exploited VulnerabilitiesOct 20, 00:00 UTC · 11d agoExploit / PoCExploitedCVE-2026-1069311

Exploited SiteGuard flaw can yield root; patch may wipe traces

Save SiteGuard diagnostic data before upgrading; JVN confirmed in-the-wild use but published no attacker indicators.

GBHackersOct 19, 13:10 UTC · 11d agoExploit / PoCExploitedCVE-2026-1069312 · 2 reads

Attackers exploit SiteGuard WAF command injection for root or SYSTEM

CVE-2026-106931 is in the default statistics function; fixed builds are 8.00 Update 5 and 7.00 Update 6.

Cyber Security NewsOct 19, 12:07 UTC · 11d agoExploit / PoCExploitedCVE-2026-1069311

SiteGuard WAF command injection CVE-2026-106931 exploited in the wild

A local low-privilege user can run commands as root or SYSTEM through the default statistics feature; patched builds are out.

Security AffairsOct 19, 07:43 UTC · 11d agoExploit / PoCExploitedCVE-2026-1069313

Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root

CVE-2026-106931 is in the default statistics feature; JPCERT and the vendor say abuse is already confirmed.

BleepingComputerOct 18, 14:23 UTC · 12d agoExploit / PoCExploitedCVE-2026-1069316 · 1 read

Related CVEs

by mentions

CVE-2026-1069313%8.5
OS command injection in SiteGuard Server Edition
published 16d agoEG Secure Solutions SiteGuard Server EditionKEV
CVE-2026-966562%8.6
Admin-Triggered Arbitrary File Write & RCE in Plex Media Server
published Sep 23, 2026Plex Media ServerKEV
CVE-2026-110936<1%8.4
DLL Search-Path Hijacking in Siemens Software Center
published 15d agoSiemens Software CenterKEV
CVE-2026-966542%6.9
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
published Sep 23, 2026Plex Media ServerKEV
CVE-2026-966552%5.3
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
published Sep 23, 2026Plex Media ServerKEV
CVE-2026-966522%5.3
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
published Sep 23, 2026Plex Media ServerKEVPoC

Appears with

EG Secure Solutionsvendor · 5
JPCERT/CCorganization · 4
CISAorganization · 3
Siemens Software Centerproduct · 2
Siemensvendor · 2
Plexvendor · 2
IPAorganization · 2
Plex Media Serverproduct · 2
SiteGuardvendor · 1
Romulusmalware · 1
Forescoutorganization · 1

Entities are extracted by the model from each article. First seen Oct 18, 2026, last mentioned 9d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.