🔴 EXPLOITED
SiteGuard, a web firewall used to protect WordPress sites, has a bug (CVE-2026-106931) that hands attackers root. It is already being exploited.
Affects SiteGuard Server Edition before 8.00 Update 5.
Patch now.
https://suriq.io/blog/siteguard-cve-2026-106931-command-injection-root
SuriqSiteGuard CVE-2026-106931: Command Injection to RootCVE-2026-106931 is an actively exploited command injection in SiteGuard Server Edition's default-on feature that gives root or SYSTEM. Patch to 8.00 Update 5.