cybercrime.clubhttps://cybercrime.club/tags/waf/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usSun, 25 Oct 2026 11:03:24 -0400SiteGuard WAF CVE-2026-106931: Exploited Command Injection Gives Root/SYSTEM, and Patching Can Erase the Evidencehttps://cybercrime.club/posts/siteguard-waf-cve-2026-106931-statistics-command-injection-root-kev/Sun, 25 Oct 2026 11:03:24 -0400https://cybercrime.club/posts/siteguard-waf-cve-2026-106931-statistics-command-injection-root-kev/EG Secure Solutions' SiteGuard Server Edition WAF has an exploited OS command injection in its default-on statistics feature; CISA added it to KEV and the vendor says to save diagnostics before patching.vulnerabilities