What happened
EG Secure Solutions SiteGuard Server Edition (for Apache httpd, nginx, IIS, and FreeBSD variants) contains an OS command injection vulnerability (Ver2.20 up to Ver8.00 Update 5 / Ver7.00 Update 6 on FreeBSD) that can let an attacker execute arbitrary commands with root or SYSTEM privileges. It was added to the CISA KEV catalog on 2026-10-20 with confirmed in-the-wild exploitation.
Why it matters
Confirmed exploited in-the-wild with a federal due date of 2026-10-23. It is a web/security-appliance (not an AI target) but is surfaced because KEV denotes active exploitation and it can sit in front of web-facing services (including model/agent endpoints). Defenders should patch per vendor alert and CISA BOD 26-04 guidance.
Attack vector
OS command injection leading to arbitrary command execution with root/System privileges
Affected systems
EG Secure Solutions SiteGuard Server Edition (Apache httpd / nginx / IIS / FreeBSD), affected versions up to Ver8.00 Update 5
Mitigation
Apply vendor update (Ver8.00 Update 5); per CISA KEV, apply mitigations per vendor instructions and BOD 26-04