CVE-2026-17561

CriticalCVSS 9.8

Published: 31/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

24th percentile - higher than 24% of all known CVEs

Summary

Logsign SIEM before version 6.4.108 contains a Code Injection vulnerability that allows an attacker to execute arbitrary code.

Risk Assessment

An attacker may take control of the SIEM system, potentially compromising monitored environments.

Recommendation

Update Logsign SIEM to version 6.4.108 or later.

Original NVD description (English source)

Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: before 6.4.108.