Insufficiently Protected Credentials in Logsign SIEM by Innotim Software
CVE-2026-14564

9CRITICAL

Key Information:

Vendor

Innotim Software Telecommunications And Consulting Trade Ltd. Co.

Status
Logsign Siem
Vendor
CVE Published:
17 August 2026

What is CVE-2026-14564?

An insufficiently protected credentials vulnerability in Logsign SIEM allows unauthorized users to retrieve embedded sensitive data. This affects versions prior to 6.4.114, which may expose critical information and lead to potential data breaches. It is essential for users of Logsign SIEM to apply necessary updates and adopt robust security practices to mitigate risks associated with this vulnerability.

Affected Version(s)

Logsign SIEM 6.4.97 < 6.4.114

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Deniz BEKTAŞ
Banu İKİNCİ
.