{"metadata": {"vulnerability": "CVE-2026-106931", "count": 48, "kinds": {"milestone": 4, "sighting": 29, "kev": 5, "other": 10}}, "data": [{"timestamp": "2026-10-07T04:50:26.138Z", "date_only": false, "value": "2026-10-07T04:50:26.138Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-106931", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T19:00:00Z", "date_only": false, "value": "2026-10-13T19:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://jvn.jp/en/jp/JVN88474777", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "3eb9358a-1771-42f0-8957-7f4e39c5f846", "url": "https://jvn.jp/en/jp/JVN88474777"}, {"timestamp": "2026-10-14T04:45:07.678Z", "date_only": false, "value": "2026-10-14T04:45:07.678Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-106931", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T05:16:42Z", "date_only": false, "value": "2026-10-14T05:16:42Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RHMJ-5MP2-RQ7C", "record": "GHSA-RHMJ-5MP2-RQ7C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T05:16:42.633Z", "date_only": false, "value": "2026-10-14T05:16:42.633", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-106931", "record": "FKIE_CVE-2026-106931", "field": "published"}, {"timestamp": "2026-10-14T05:59:15.065Z", "date_only": false, "value": "2026-10-14T05:59:15.065641Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/e5dbrvwqq3cd4", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "12eb493f-6a84-4e3a-aa50-76631df53a90", "content": "CVE-2026-106931 - SiteGuard Server Edition OS Command Injection Vulnerability\nCVE ID : CVE-2026-106931\n \n Published : Oct. 14, 2026, 4:45 a.m. | 40\u00a0minutes ago\n \n Description : SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/e5dbrvwqq3cd4"}, {"timestamp": "2026-10-14T06:03:44.103Z", "date_only": false, "value": "2026-10-14T06:03:44.103196Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nvnb.misskey.io.ap.brid.gy/post/3mxsurz3iol52", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "ea38d850-1922-4f50-a2c4-822e84e03ee1", "content": "\u3010JPCERT\u3011\u6ce8\u610f\u559a\u8d77: SiteGuard Server Edition\u306b\u304a\u3051\u308bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-106931\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77 (\u516c\u958b)\nhttps://www.jpcert.or.jp/at/2026/at260032.html\n\nNVNB\u306f\u8106\u5f31\u6027\u60c5\u5831\u306e\u95b2\u89a7\u3092\u652f\u63f4\u3059\u308b\u30b5\u30fc\u30d3\u30b9\u3067\u3059\nhttps://nvnb.blossomsarchive.com/", "url": "https://bsky.app/profile/nvnb.misskey.io.ap.brid.gy/post/3mxsurz3iol52"}, {"timestamp": "2026-10-14T06:31:14Z", "date_only": false, "value": "2026-10-14T06:31:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RHMJ-5MP2-RQ7C", "record": "GHSA-RHMJ-5MP2-RQ7C", "field": "published"}, {"timestamp": "2026-10-14T06:31:14Z", "date_only": false, "value": "2026-10-14T06:31:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RHMJ-5MP2-RQ7C", "record": "GHSA-RHMJ-5MP2-RQ7C", "field": "modified"}, {"timestamp": "2026-10-14T08:06:26.963Z", "date_only": false, "value": "2026-10-14T08:06:26.963107Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mxt3mrg3n26c", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "2ab1b4bb-0ee3-44f7-b586-9810e1b18fc9", "content": "SiteGuard Server Edition\u306b\u304a\u3051\u308bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-106931\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77 https://www.jpcert.or.jp/at/2026/at260032.html", "url": "https://bsky.app/profile/shiojiri.com/post/3mxt3mrg3n26c"}, {"timestamp": "2026-10-14T08:37:00Z", "date_only": false, "value": "2026-10-14T17:37+09:00", "kind": "other", "label": "Dc:date", "source": "jvndb \u00b7 JVNDB-2026-000148", "record": "JVNDB-2026-000148", "field": "dc:date"}, {"timestamp": "2026-10-14T08:37:00Z", "date_only": false, "value": "2026-10-14T17:37+09:00", "kind": "other", "label": "Dcterms:modified", "source": "jvndb \u00b7 JVNDB-2026-000148", "record": "JVNDB-2026-000148", "field": "dcterms:modified"}, {"timestamp": "2026-10-14T09:09:32.417Z", "date_only": false, "value": "2026-10-14T09:09:32.417Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / jpcert", "record": "CVE-2026-106931", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T09:40:13.279Z", "date_only": false, "value": "2026-10-14T09:40:13.279849Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crawler.baldanders.info/post/3mxtavvjue62r", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "5372215b-ca7c-471d-a03a-a7be6d49b494", "content": "\uff1e \u6ce8\u610f\u559a\u8d77: SiteGuard Server Edition\u306b\u304a\u3051\u308bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-106931\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77  (\u516c\u958b)\nhttps://www.jpcert.or.jp/at/2026/at260032.html\n", "url": "https://bsky.app/profile/crawler.baldanders.info/post/3mxtavvjue62r"}, {"timestamp": "2026-10-14T16:47:47.388Z", "date_only": false, "value": "2026-10-14T16:47:47.388644Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440280448092459", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "b0e435f7-7c67-4783-9d5a-a451e61d42a8", "content": "CVE-2026-106931  SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.\nhttps://www.cve.org/CVERecord?id=CVE-2026-106931https://www.eg-secure.co.jp/siteguard/news/alert-202610-1https://jvn.jp/en/jp/JVN88474777/#EGSecureSolutionsInc. #SiteGuardServerEditionforApachehttpd #SiteGuardServerEditionforNginx #SiteGuardServerEditionforIIS #SiteGuardServerEditionforApachehttpdonFreeBSD #SiteGuardServerEditionforNginxonFreeBSD#CVE_2026_106931#bot", "url": "https://infosec.exchange/users/cve/statuses/117440280448092459"}, {"timestamp": "2026-10-14T23:02:19.850Z", "date_only": false, "value": "2026-10-14T23:02:19.850330Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxunq4hgrc2m", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "24e6f606-32ed-410c-aa82-8e983f6efc6a", "content": "SiteGuard Server Edition\u306e\u8106\u5f31\u6027\u300cCVE-2026-106931\u300d\u3067\u30b5\u30a4\u30d0\u30fc\u653b\u6483 \u60aa\u7528\u78ba\u8a8d \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxunq4hgrc2m"}, {"timestamp": "2026-10-15T04:18:49.935Z", "date_only": false, "value": "2026-10-15T04:18:49.935983Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxv7g4dlsk2r", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "6c271c63-6ad3-42ed-bb8d-b8d3a736f568", "content": "A SiteGuard Server Edition vulnerability, CVE-2026-106931, is exploited in the wild and grants root or SYSTEM access. Update to Ver8.00 Update 5 now.\n\n#SiteGuard #CVE2026106931 #ExploitedInTheWild #WAF #CommandInjection #JPCERT #PatchNow #CyberSecurity", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxv7g4dlsk2r"}, {"timestamp": "2026-10-15T08:39:32.284Z", "date_only": false, "value": "2026-10-15T08:39:32.284766Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mxvnycmgto2s", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "3d811984-a211-49be-9f57-f86ee7ebb260", "content": "SiteGuard Server Edition\u306b\u304a\u3051\u308bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-106931\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77 - Security Advisory Regarding OS Command Injection Vulnerability (CVE-2026-106931) in SiteGuard Server Edition", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mxvnycmgto2s"}, {"timestamp": "2026-10-15T19:36:18Z", "date_only": false, "value": "2026-10-15T19:36:18+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-106931", "field": "timestamps.asserted_at", "uuid": "17ca7bbc-8ccc-4f66-a38f-1b78a9682b9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T19:36:18Z", "date_only": false, "value": "2026-10-15T19:36:18+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-106931", "field": "timestamps.first_seen_at", "uuid": "17ca7bbc-8ccc-4f66-a38f-1b78a9682b9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T19:36:18Z", "date_only": false, "value": "2026-10-15T19:36:18+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-106931", "field": "status.status_updated_at", "uuid": "17ca7bbc-8ccc-4f66-a38f-1b78a9682b9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T19:36:18.244Z", "date_only": false, "value": "2026-10-15T19:36:18.244Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-106931", "field": "evidence.0.details.added_date", "uuid": "17ca7bbc-8ccc-4f66-a38f-1b78a9682b9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-16T15:15:38.574Z", "date_only": false, "value": "2026-10-16T15:15:38.574629Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-106931", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T15:15:38.574Z", "date_only": false, "value": "2026-10-16T15:15:38.574629Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-106931", "record": "FKIE_CVE-2026-106931", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T15:31:53.034Z", "date_only": false, "value": "2026-10-16T15:31:53.034Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-106931", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:31:53.034Z", "date_only": false, "value": "2026-10-16T15:31:53.034Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-106931", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T16:16:57.180Z", "date_only": false, "value": "2026-10-16T16:16:57.180", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-106931", "record": "FKIE_CVE-2026-106931", "field": "lastModified"}, {"timestamp": "2026-10-16T20:00:01Z", "date_only": false, "value": "2026-10-16T20:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-106931", "field": "timestamps.recorded_at", "uuid": "17ca7bbc-8ccc-4f66-a38f-1b78a9682b9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-16T20:00:50.873Z", "date_only": false, "value": "2026-10-16T20:00:50.873424Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/17ca7bbc-8ccc-4f66-a38f-1b78a9682b9a", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "2c0040d5-c2a0-4f82-8594-78096735ecb9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/17ca7bbc-8ccc-4f66-a38f-1b78a9682b9a"}, {"timestamp": "2026-10-18T18:00:10.164Z", "date_only": false, "value": "2026-10-18T18:00:10.164972Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/windowsforum.com/post/3my66pkcdkb2n", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "cb0e1f46-6e54-46d8-9a00-ab921552d131", "content": "SiteGuard Server CVE-2026-106931 exploited on IIS; Copilot Studio in Teams retires Feb 2027; Win11 2026 Copilot key & Taskbar customization; remove persistent Chrome hijackers via policies; DLSS-NR-on-AMD 0.8.0. +24 more stories, 9 new members", "url": "https://bsky.app/profile/windowsforum.com/post/3my66pkcdkb2n"}, {"timestamp": "2026-10-18T18:00:10.179Z", "date_only": false, "value": "2026-10-18T18:00:10.179098Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/windowsforum.com/post/3my66pkcdkb2n", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "adbfc9e7-0cd1-4358-9542-be4844cb2dd8", "content": "SiteGuard Server CVE-2026-106931 exploited on IIS; Copilot Studio in Teams retires Feb 2027; Win11 2026 Copilot key & Taskbar customization; remove persistent Chrome hijackers via policies; DLSS-NR-on-AMD 0.8.0. +24 more stories, 9 new members", "url": "https://bsky.app/profile/windowsforum.com/post/3my66pkcdkb2n"}, {"timestamp": "2026-10-18T22:41:21.496Z", "date_only": false, "value": "2026-10-18T22:41:21.496186Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mariogalarza.bsky.social/post/3my6ogdxuiq24", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "ded27e21-4895-4d61-9c51-9d6cace5d83f", "content": "SiteGuard WAF zero-day CVE-2026-106931 under active exploit: OS command injection as root via the default-on statistics feature. 500k+ WordPress sites in scope. Patch now, but pull diagnostics first: https://www.linkedin.com/feed/update/urn:li:share:7517716350505566208/", "url": "https://bsky.app/profile/mariogalarza.bsky.social/post/3my6ogdxuiq24"}, {"timestamp": "2026-10-18T22:41:21.500Z", "date_only": false, "value": "2026-10-18T22:41:21.500084Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mariogalarza.bsky.social/post/3my6ogdxuiq24", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "beb24934-a56b-4cbc-bfcc-96241dfbe0a0", "content": "SiteGuard WAF zero-day CVE-2026-106931 under active exploit: OS command injection as root via the default-on statistics feature. 500k+ WordPress sites in scope. Patch now, but pull diagnostics first: https://www.linkedin.com/feed/update/urn:li:share:7517716350505566208/", "url": "https://bsky.app/profile/mariogalarza.bsky.social/post/3my6ogdxuiq24"}, {"timestamp": "2026-10-18T23:48:13.617Z", "date_only": false, "value": "2026-10-18T23:48:13.617970Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3my6s5wesbu2r", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "6bdadb7a-a7f8-4a92-ab03-1b7a0f3eb686", "content": "CVE-2026-106931, a critical command-injection flaw in SiteGuard Server Edition\u2019s statistics feature, is being exploited. Affected versions can allow root or SYSTEM command execution; administrators should preserve diagnostic evidence before applying fixes.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3my6s5wesbu2r"}, {"timestamp": "2026-10-18T23:48:13.623Z", "date_only": false, "value": "2026-10-18T23:48:13.623234Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3my6s5wesbu2r", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "d62f2517-b5d5-498b-9b1a-1f4699feac79", "content": "CVE-2026-106931, a critical command-injection flaw in SiteGuard Server Edition\u2019s statistics feature, is being exploited. Affected versions can allow root or SYSTEM command execution; administrators should preserve diagnostic evidence before applying fixes.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3my6s5wesbu2r"}, {"timestamp": "2026-10-19T02:49:14.337Z", "date_only": false, "value": "2026-10-19T02:49:14.337010Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3my74bmedkc2p", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "48c7acb5-cd26-4060-9243-b7906d391b07", "content": "\ud83e\udd16 CVE-2026-106931: OS command injection in SiteGuard Server Edition WAF (stats on by default) exploited in the wild for root/SYSTEM. v2.20+ before 8.00 U5 affected; patch now.\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3my74bmedkc2p"}, {"timestamp": "2026-10-19T02:49:14.344Z", "date_only": false, "value": "2026-10-19T02:49:14.344981Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3my74bmedkc2p", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "5cb457b5-5aef-477e-bb40-66aad5313f8f", "content": "\ud83e\udd16 CVE-2026-106931: OS command injection in SiteGuard Server Edition WAF (stats on by default) exploited in the wild for root/SYSTEM. v2.20+ before 8.00 U5 affected; patch now.\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3my74bmedkc2p"}, {"timestamp": "2026-10-19T03:12:40.336Z", "date_only": false, "value": "2026-10-19T03:12:40.336430Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3my75lj3nm42l", "record": "cve-2026-106931", "field": "creation_timestamp", "uuid": "aa9fc80c-17bf-48fb-a76b-b68928b3fa1a", "content": "\ud83d\udcf0 Peretas Manfaatkan Celah Kritis SiteGuard WAF untuk Eksekusi Perintah Sistem sebagai Admin\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/19/peretas-manfaatkan-celah-kritis-siteguard-waf-cve-2026-106931/\n\n#apache #cyberSecurity #exploit #firewall #hacker #iis #japan #jpcert #", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3my75lj3nm42l"}, {"timestamp": "2026-10-19T03:12:40.343Z", "date_only": false, "value": "2026-10-19T03:12:40.343037Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3my75lj3nm42l", "record": "cve-2026-106931", "field": "creation_timestamp", "uuid": "214386d3-39bb-4480-979b-2ff886f96fd2", "content": "\ud83d\udcf0 Peretas Manfaatkan Celah Kritis SiteGuard WAF untuk Eksekusi Perintah Sistem sebagai Admin\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/19/peretas-manfaatkan-celah-kritis-siteguard-waf-cve-2026-106931/\n\n#apache #cyberSecurity #exploit #firewall #hacker #iis #japan #jpcert #", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3my75lj3nm42l"}, {"timestamp": "2026-10-19T05:59:37.761Z", "date_only": false, "value": "2026-10-19T05:59:37.761261Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3my7gw2hvny24", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "42dbd32f-725f-4497-9875-0f0ef564bd77", "content": "SiteGuard WAF (CVE-2026-106931) : injection de commandes d\u00e9j\u00e0 exploit\u00e9e, root/SYSTEM sur les serveurs. La fonction statistiques est active par d\u00e9faut \u2014 pr\u00e9servez les preuves avant de patcher.\nhttps://jvn.jp/en/jp/JVN88474777/index.html", "url": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3my7gw2hvny24"}, {"timestamp": "2026-10-19T08:17:46.371Z", "date_only": false, "value": "2026-10-19T08:17:46.371398Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/et4xqkzcfrza3", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "4a6447b9-32e0-458e-8e9d-01eefed0aa87", "content": "Japan\u2019s SiteGuard WAF flaw CVE-2026-106931 is already being exploited", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/et4xqkzcfrza3"}, {"timestamp": "2026-10-19T08:17:46.379Z", "date_only": false, "value": "2026-10-19T08:17:46.379095Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/et4xqkzcfrza3", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "43fc76da-0449-4192-ac11-abd2aa45ee1f", "content": "Japan\u2019s SiteGuard WAF flaw CVE-2026-106931 is already being exploited", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/et4xqkzcfrza3"}, {"timestamp": "2026-10-19T08:39:23.323Z", "date_only": false, "value": "2026-10-19T08:39:23.323249Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-975b0fcd-8bfd0c466ce52cd9", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "7d6fd946-fdd6-4f94-96c7-7120471248bc", "content": "Attackers are exploiting vulnerability CVE-2026-106931 in SiteGuard Server Edition to run commands as root or SYSTEM. EG Secure Solutions published an urgent alert warning of CVE-2026-106931, an OS command injection bug in SiteGuard Server Edition. Threat actors are already exploiting it in the wild. A successful exploit lets them run commands with root or SYSTEM [\u2026]Japan's SiteGuard WAF flaw CVE-2026-106931 is already being exploited", "url": "https://poliverso.org/objects/0477a01e-975b0fcd-8bfd0c466ce52cd9"}, {"timestamp": "2026-10-19T08:39:25.789Z", "date_only": false, "value": "2026-10-19T08:39:25.789462Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3my7ptntvrll2", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "46159b45-4154-49df-b08f-b5a2dbe59dd6", "content": "Attackers are exploiting vulnerability CVE-2026-106931 in SiteGuard Server Edition to run commands as root or SYSTEM. EG Secure Solutions published an urgent alert warning of CVE-2026-106931, an OS command injection bug in SiteGuard Server Edition. Threat actors are already exploiting it in the [\u2026]", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3my7ptntvrll2"}, {"timestamp": "2026-10-19T08:59:53.176Z", "date_only": false, "value": "2026-10-19T08:59:53.176111Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3my7qydvtp22x", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "72d6bbe3-949a-4228-b573-086c8b88ec12", "content": "Japan's SiteGuard WAF flaw CVE-2026-106931 is already being exploited\n\nsecurityaffairs.com/201258/secur...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3my7qydvtp22x"}, {"timestamp": "2026-10-19T08:59:53.186Z", "date_only": false, "value": "2026-10-19T08:59:53.186149Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3my7qydvtp22x", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "acf51f0e-284b-4c19-a4a2-d70930401364", "content": "Japan's SiteGuard WAF flaw CVE-2026-106931 is already being exploited\n\nsecurityaffairs.com/201258/secur...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3my7qydvtp22x"}, {"timestamp": "2026-10-19T12:42:02.654Z", "date_only": false, "value": "2026-10-19T12:42:02.654546Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/117467625669064903", "record": "cve-2026-106931", "field": "creation_timestamp", "uuid": "e3419f42-7515-4d46-914e-e9679cf67fc3", "content": "Japan\u2019s SiteGuard WAF flaw CVE-2026-106931 is already being exploited https://securityaffairs.com/201258/security/japans-siteguard-waf-flaw-cve-2026-106931-is-already-being-exploited.html", "url": "https://infosec.exchange/users/patrickcmiller/statuses/117467625669064903"}, {"timestamp": "2026-10-19T12:56:42.062Z", "date_only": false, "value": "2026-10-19T12:56:42.062059Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117467680691484526", "record": "CVE-2026-106931", "field": "creation_timestamp", "uuid": "7087d403-8af0-4c3e-b86c-c25ab7fd2ecc", "content": "SiteGuard exploited zero-day: CVE-2026-106931 (CVSS4: 8.5 high) SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.\nEnglish translation:\n\nA vulnerability (CVE-2026-106931) allowing OS command injection has been discovered in the statistics function of SiteGuard Server Edition. Exploitation has already been confirmed. \nhttps://www.eg-secure.co.jp/siteguard/news/alert-202610-1\n#siteguard #eitw #CVE #zeroday", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117467680691484526"}]}