CVE-2026-14564
CriticalCVSS 9.0Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
In Logsign SIEM, there is an insufficiently protected credentials vulnerability that allows retrieving embedded sensitive data. Affects versions from 6.4.97 before 6.4.114.
Risk Assessment
An attacker may gain access to sensitive credential data, potentially leading to unauthorized access to systems and data.
Recommendation
Update Logsign SIEM to version 6.4.114 or later, which includes the fix.
Other vulnerabilities in Logsign SIEM
See all- CVE-2026-90926High
Code Injection vulnerability in Logsign SIEM by Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Allows execution of arbitrary code. The issue affects versions from 6.4.101 before 6.4.117.
- CVE-2026-90925High
Path Traversal vulnerability in Logsign SIEM by Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Allows access to files outside the allowed directory. The issue affects versions from 6.4.101 before 6.4.117.
- CVE-2026-90924Critical
A vulnerability in Logsign SIEM allows an attacker to use default or common usernames and passwords. The issue affects versions from 6.4.101 before 6.4.117.
- CVE-2026-17561Critical
A Code Injection vulnerability in Logsign SIEM (before 6.4.115) allows code injection.
Original NVD description (English source)
Insufficiently Protected Credentials vulnerability in Innotim Software Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Retrieve Embedded Sensitive Data. This issue affects Logsign SIEM: from 6.4.97 before 6.4.114.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS