Hackers exploit SiteGuard WAF flaw to run commands as admins

Attackers are actively exploiting an OS command injection vulnerability in SiteGuard Server Edition, a web application firewall product. The flaw allows threat actors to execute arbitrary commands with root or SYSTEM-level privileges on affected servers. This represents a critical security risk as the WAF product, designed to protect web servers, is itself being weaponized against the systems it defends. The vulnerability enables full system compromise due to the elevated privilege level of command execution. Organizations running SiteGuard Server Edition are urged to apply patches or mitigations immediately. The active exploitation in the wild increases the urgency of remediation efforts.