<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-20T08:14:59.927177+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7087d403-8af0-4c3e-b86c-c25ab7fd2ecc/export</id>
    <title>7087d403-8af0-4c3e-b86c-c25ab7fd2ecc</title>
    <updated>2026-10-20T08:14:59.955740+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7087d403-8af0-4c3e-b86c-c25ab7fd2ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106931", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117467680691484526", "content": "SiteGuard exploited zero-day: CVE-2026-106931 (CVSS4: 8.5 high) SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.\nEnglish translation:\n\nA vulnerability (CVE-2026-106931) allowing OS command injection has been discovered in the statistics function of SiteGuard Server Edition. Exploitation has already been confirmed. \nhttps://www.eg-secure.co.jp/siteguard/news/alert-202610-1\n#siteguard #eitw #CVE #zeroday", "creation_timestamp": "2026-10-19T12:56:42.062059Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7087d403-8af0-4c3e-b86c-c25ab7fd2ecc/export"/>
    <published>2026-10-19T12:56:42.062059+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e3419f42-7515-4d46-914e-e9679cf67fc3/export</id>
    <title>e3419f42-7515-4d46-914e-e9679cf67fc3</title>
    <updated>2026-10-20T08:14:59.957845+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e3419f42-7515-4d46-914e-e9679cf67fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-106931", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/117467625669064903", "content": "Japan\u2019s SiteGuard WAF flaw CVE-2026-106931 is already being exploited https://securityaffairs.com/201258/security/japans-siteguard-waf-flaw-cve-2026-106931-is-already-being-exploited.html", "creation_timestamp": "2026-10-19T12:42:02.654546Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e3419f42-7515-4d46-914e-e9679cf67fc3/export"/>
    <published>2026-10-19T12:42:02.654546+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/acf51f0e-284b-4c19-a4a2-d70930401364/export</id>
    <title>acf51f0e-284b-4c19-a4a2-d70930401364</title>
    <updated>2026-10-20T08:14:59.957987+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "acf51f0e-284b-4c19-a4a2-d70930401364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106931", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3my7qydvtp22x", "content": "Japan's SiteGuard WAF flaw CVE-2026-106931 is already being exploited\n\nsecurityaffairs.com/201258/secur...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-10-19T08:59:53.186149Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/acf51f0e-284b-4c19-a4a2-d70930401364/export"/>
    <published>2026-10-19T08:59:53.186149+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/72d6bbe3-949a-4228-b573-086c8b88ec12/export</id>
    <title>72d6bbe3-949a-4228-b573-086c8b88ec12</title>
    <updated>2026-10-20T08:14:59.958094+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "72d6bbe3-949a-4228-b573-086c8b88ec12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106931", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3my7qydvtp22x", "content": "Japan's SiteGuard WAF flaw CVE-2026-106931 is already being exploited\n\nsecurityaffairs.com/201258/secur...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-10-19T08:59:53.176111Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/72d6bbe3-949a-4228-b573-086c8b88ec12/export"/>
    <published>2026-10-19T08:59:53.176111+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/46159b45-4154-49df-b08f-b5a2dbe59dd6/export</id>
    <title>46159b45-4154-49df-b08f-b5a2dbe59dd6</title>
    <updated>2026-10-20T08:14:59.958190+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "46159b45-4154-49df-b08f-b5a2dbe59dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106931", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3my7ptntvrll2", "content": "Attackers are exploiting vulnerability CVE-2026-106931 in SiteGuard Server Edition to run commands as root or SYSTEM. EG Secure Solutions published an urgent alert warning of CVE-2026-106931, an OS command injection bug in SiteGuard Server Edition. Threat actors are already exploiting it in the [\u2026]", "creation_timestamp": "2026-10-19T08:39:25.789462Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/46159b45-4154-49df-b08f-b5a2dbe59dd6/export"/>
    <published>2026-10-19T08:39:25.789462+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7d6fd946-fdd6-4f94-96c7-7120471248bc/export</id>
    <title>7d6fd946-fdd6-4f94-96c7-7120471248bc</title>
    <updated>2026-10-20T08:14:59.958291+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7d6fd946-fdd6-4f94-96c7-7120471248bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106931", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-975b0fcd-8bfd0c466ce52cd9", "content": "Attackers are exploiting vulnerability CVE-2026-106931 in SiteGuard Server Edition to run commands as root or SYSTEM. EG Secure Solutions published an urgent alert warning of CVE-2026-106931, an OS command injection bug in SiteGuard Server Edition. Threat actors are already exploiting it in the wild. A successful exploit lets them run commands with root or SYSTEM [\u2026]Japan's SiteGuard WAF flaw CVE-2026-106931 is already being exploited", "creation_timestamp": "2026-10-19T08:39:23.323249Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7d6fd946-fdd6-4f94-96c7-7120471248bc/export"/>
    <published>2026-10-19T08:39:23.323249+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/43fc76da-0449-4192-ac11-abd2aa45ee1f/export</id>
    <title>43fc76da-0449-4192-ac11-abd2aa45ee1f</title>
    <updated>2026-10-20T08:14:59.958389+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "43fc76da-0449-4192-ac11-abd2aa45ee1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106931", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/et4xqkzcfrza3", "content": "Japan\u2019s SiteGuard WAF flaw CVE-2026-106931 is already being exploited", "creation_timestamp": "2026-10-19T08:17:46.379095Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/43fc76da-0449-4192-ac11-abd2aa45ee1f/export"/>
    <published>2026-10-19T08:17:46.379095+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4a6447b9-32e0-458e-8e9d-01eefed0aa87/export</id>
    <title>4a6447b9-32e0-458e-8e9d-01eefed0aa87</title>
    <updated>2026-10-20T08:14:59.958481+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4a6447b9-32e0-458e-8e9d-01eefed0aa87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106931", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/et4xqkzcfrza3", "content": "Japan\u2019s SiteGuard WAF flaw CVE-2026-106931 is already being exploited", "creation_timestamp": "2026-10-19T08:17:46.371398Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4a6447b9-32e0-458e-8e9d-01eefed0aa87/export"/>
    <published>2026-10-19T08:17:46.371398+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/42dbd32f-725f-4497-9875-0f0ef564bd77/export</id>
    <title>42dbd32f-725f-4497-9875-0f0ef564bd77</title>
    <updated>2026-10-20T08:14:59.958580+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "42dbd32f-725f-4497-9875-0f0ef564bd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106931", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3my7gw2hvny24", "content": "SiteGuard WAF (CVE-2026-106931) : injection de commandes d\u00e9j\u00e0 exploit\u00e9e, root/SYSTEM sur les serveurs. La fonction statistiques est active par d\u00e9faut \u2014 pr\u00e9servez les preuves avant de patcher.\nhttps://jvn.jp/en/jp/JVN88474777/index.html", "creation_timestamp": "2026-10-19T05:59:37.761261Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/42dbd32f-725f-4497-9875-0f0ef564bd77/export"/>
    <published>2026-10-19T05:59:37.761261+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/214386d3-39bb-4480-979b-2ff886f96fd2/export</id>
    <title>214386d3-39bb-4480-979b-2ff886f96fd2</title>
    <updated>2026-10-20T08:14:59.958675+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "214386d3-39bb-4480-979b-2ff886f96fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-106931", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3my75lj3nm42l", "content": "\ud83d\udcf0 Peretas Manfaatkan Celah Kritis SiteGuard WAF untuk Eksekusi Perintah Sistem sebagai Admin\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/19/peretas-manfaatkan-celah-kritis-siteguard-waf-cve-2026-106931/\n\n#apache #cyberSecurity #exploit #firewall #hacker #iis #japan #jpcert #", "creation_timestamp": "2026-10-19T03:12:40.343037Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/214386d3-39bb-4480-979b-2ff886f96fd2/export"/>
    <published>2026-10-19T03:12:40.343037+00:00</published>
  </entry>
</feed>
