CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition

1. A public proof of concept: not reached

2. A nuclei template that exploits rather than only fingerprints: not reached

3. A merged Metasploit module: not reached

4. Exploitation attempts reported by a named party: reached 2026-10-14

• EG Secure Solutions (vendor alert, 2026年10月14日) reached, 2026-10-14

  third-party text, as Pulse recorded it
  SiteGuard Server Edition の統計機能に、OSコマンドインジェクションの脆弱性（CVE-2026-106931）が見つかりました。すでに悪用が確認されています。

  Pulse: The vendor stating exploitation has already been confirmed ("すでに悪用が確認されています"). The page adds that customers with support contracts were told individually on 2026年9月29日. No victim is named.
  capture pulse: raw/jp/security-vendor/eg-secure/siteguard-alert-202610-1/20261022T221133Z/text.txt, 22 October 2026, 22:11 UTC, sha256 91e8f0dd365b313c original

5. A KEV listing (the date added): reached 2026-10-20

• Pulse's own check 2026-10-20
  KEV catalog 2026.10.21
  capture pulse: raw/us/registry/cisa-kev/kev-json/20261022T221059Z/text.txt, 22 October 2026, 22:10 UTC, sha256 97336b5231c74981 original

6. knownRansomwareCampaignUse: Known on KEV: not reached

7. A national CERT reporting compromises in its country: not reached

8. A named organisation saying it was compromised through that flaw: not reached

a victim's own statement is recorded by hand from a capture; none recorded