SiteGuard WAF zero-day exploited for OS command injection as SYSTEM/root

Threat actors are actively exploiting an OS command injection vulnerability in SiteGuard Server Edition, achieving command execution as SYSTEM or root on affected servers. The flaw is being used in the wild, though the full scope and patch availability remain unclear. This is a critical security development for organizations relying on SiteGuard for web application protection.