CISA adds SiteGuard Server Edition WAF command injection flaw to KEV catalog

What happened.CISA added an actively exploited OS command injection defect in EG Secure Solutions SiteGuard Server Edition to its Known Exploited Vulnerabilities catalog.

Why it matters.Host-based web application firewalls run directly alongside web servers to inspect incoming traffic and enforce filtering policies. A compromised host firewall turns a security perimeter into an adversary stronghold with kernel and system privileges. Teams operating Apache, Nginx, or IIS servers with SiteGuard must apply vendor maintenance builds and inspect process logs for unauthorized shells.