Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root

Attackers are exploiting an OS command injection vulnerability in SiteGuard Server Edition to execute commands as root or SYSTEM on affected servers. The flaw allows remote code execution without authentication, giving attackers full control over compromised systems. Security researchers urge administrators to apply patches immediately and monitor for signs of exploitation.