Japan’s SiteGuard WAF flaw CVE-2026-106931 is already being exploited
2026-10-19T08:51:38Z•ab850cb07e859820c507acce54537db8d1c1bbf44226d46337663c4438351d7b
CVE-2026-106931AI securityBeyondTrustBroadcom Wi-FiCERT-InCISA KEVCikaBika BotDiscord C2FortinetNgrokNorth Korean threat activityOS command injectionRust malwareSiteGuard Server Editionactive exploitationcyber incidentdata theftidentity fraudremote access trojanroot/SYSTEM executionrouter takeoverunauthenticated RCEunauthorized access
What happened
Security Affairs feed covering active exploitation of CVE-2026-106931 in SiteGuard Server Edition, a longstanding unauthenticated Broadcom Wi-Fi vulnerability enabling nearby router takeover, malware campaigns including the Rust-based CikaBika Bot, North Korean fraudulent IT-worker operations, CISA KEV additions involving Fortinet and BeyondTrust products, a cyber incident disrupting the U.S. Bankruptcy Noticing Center, and unauthorized AI-agent access incidents reported by CERT-In.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- ab850cb07e859820c507acce54537db8d1c1bbf44226d46337663c4438351d7b
- Enrichment time
- 2026-10-19T08:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.