Hackers exploit SiteGuard WAF flaw to run commands with root privileges

Hackers are exploiting an OS command-injection vulnerability in the statistics function of the SiteGuard Server Edition web application firewall (WAF), allowing commands to be executed with root or SYSTEM privileges on affected machines. CVE-2026-106931 is being exploited in the wild and is rated critical.