CVE-2026-90924
CriticalCVSS 9.8Summary
A vulnerability in Logsign SIEM allows an attacker to use default or common usernames and passwords. The issue affects versions from 6.4.101 before 6.4.117.
Risk Assessment
An attacker can gain unauthorized access to the SIEM system, potentially leading to compromise of security data confidentiality and integrity.
Recommendation
Immediately update Logsign SIEM to version 6.4.117 or later and change all default credentials.
Other vulnerabilities in Logsign SIEM
See all- CVE-2026-90926High
Code Injection vulnerability in Logsign SIEM by Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Allows execution of arbitrary code. The issue affects versions from 6.4.101 before 6.4.117.
- CVE-2026-90925High
Path Traversal vulnerability in Logsign SIEM by Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Allows access to files outside the allowed directory. The issue affects versions from 6.4.101 before 6.4.117.
- CVE-2026-14564Critical
In Logsign SIEM, there is an insufficiently protected credentials vulnerability that allows retrieving embedded sensitive data. Affects versions from 6.4.97 before 6.4.114.
- CVE-2026-17561Critical
A Code Injection vulnerability in Logsign SIEM (before 6.4.115) allows code injection.
Original NVD description (English source)
Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Try Common or Default Usernames and Passwords. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS