execute

Hackers exploit SiteGuard WAF vulnerability to execute commands as administrators

by
Hackers exploit SiteGuard WAF vulnerability to execute commands as administrators

Hackers are exploiting an operating system command entry vulnerability in SiteGuard Server Edition’s web application firewall (WAF), which allows them to execute commands with ROOT or SYSTEM privileges on affected computers. The security issue is tracked as CVE-2026-106931 and affects the statistics feature in host-based WAF instances, which is enabled by default. SiteGuard is a … Read more

Critical BlockStrap flaw allows hackers to execute code on Magento servers

by
Critical BlockStrap flaw allows hackers to execute code on Magento servers

Researchers warn that hackers could soon exploit a maximum severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce that could potentially allow them to execute arbitrary PHP code on store servers. According to e-commerce security firm Sansec, no attacks exploiting the vulnerability called BlockStrap have been observed so far, but threat actors are expected to find … Read more