Code Injection Vulnerability in Logsign SIEM by Innotim Software
CVE-2026-90926

8.8HIGH

Key Information:

Vendor

Innotim Software, Telecommunications And Consultancy Trade Ltd. Co.

Status
Logsign Siem
Vendor
CVE Published:
28 September 2026

What is CVE-2026-90926?

A code injection vulnerability exists in Logsign SIEM, developed by Innotim Software. This issue allows attackers to manipulate application code, potentially leading to unauthorized actions and compromising sensitive data. Affected versions range from 6.4.101 up to, but not including, 6.4.117. Organizations utilizing Logsign SIEM should prioritize patching to safeguard against exploitation.

Affected Version(s)

Logsign SIEM 6.4.101 < 6.4.117

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mert Yeniay
.