Default Credentials Vulnerability in Logsign SIEM by Innotim Software
CVE-2026-90924

9.8CRITICAL

Key Information:

Vendor: Innotim Software, Telecommunications And Consultancy Trade Ltd. Co.
Status: Logsign Siem
Vendor: CVE Published:; 28 September 2026

🔔 Create Innotim Software, Telecommunications And Consultancy Trade Ltd. Co. Vulnerability Alert

What is CVE-2026-90924?

A vulnerability in Logsign SIEM provided by Innotim Software allows attackers to exploit default credentials. This enables unauthorized access via common or pre-set usernames and passwords, compromising system security and potentially exposing sensitive data. Users are urged to update to the latest version to mitigate the risks associated with this vulnerability.

Affected Version(s)

Logsign SIEM 6.4.101 < 6.4.117

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 28, 2026
Vulnerability Reserved
Sep 14, 2026

Credit

Mert Yeniay

CVE-2026-90924 Data

JSON