Hackers target SiteGuard flaw that allows root-level commands

Summary

Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that can let them execute commands as root or SYSTEM on affected servers, BleepingComputer reports. This follows earlier reports that hackers were exploiting a command-execution flaw in Collabora’s Nextcloud app.

Timeline

1. BleepingComputer

   18 Oct 2026, 14:23 UTCSource ↗

   BleepingComputer reports that attackers are targeting a SiteGuard Server Edition command injection flaw that allows commands to be run as root or SYSTEM on affected servers.