FR
live
tag

#waf

Attackers exploit a root command-injection flaw in the SiteGuard WAF

On 18 October 2026, JPCERT/CC and vendor e-guardian confirmed that CVE-2026-106931, an OS command injection in the statistics feature of SiteGuard Server Edition, is being exploited in the wild. Preserve diagnostic evidence before patching: remediation can erase the attacker’s traces.

CloudFront flat-rate plans become manageable through the API and IaC

On September 3, 2026, AWS opened programmatic management of CloudFront flat-rate plans through the new PricingPlanManager API, the CLI, CloudFormation and the CDK. Teams can now codify subscribing, changing tiers and cancelling a no-overage monthly price, with a two-phase approval that prevents unintended billing.

Fortinet patches authentication bypasses in FortiWeb and FortiManager

On August 13, 2026 Fortinet shipped eight fixes, including a FortiWeb authentication bypass that lets an attacker log in with random credentials and a FortiManager flaw that allows impersonating a FortiGate. Teams running a firewall fleet should treat these two as top-priority patches.

Type at least two characters.

↑ ↓ navigate ↵ open esc dismiss