Attackers are actively targeting an OS command injection vulnerability in SiteGuard Server Edition, a web application firewall product. The flaw allows them to execute arbitrary commands on affected servers, according to BleepingComputer.
Successful exploitation gives attackers the ability to run commands with root or SYSTEM privileges, the highest level of access on a server. This effectively hands over full control of the machine, as the report notes.
The report does not include details on a patch or mitigation, so administrators using SiteGuard Server Edition should treat the issue as an urgent security risk and monitor vendor advisories. Because the vulnerability is already being exploited, delaying action could leave servers exposed to complete compromise.