CVE-2026-90924
Default Admin Credentials in Innotim Software's Logsign SIEM
Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM
CVSS
9.8CriticalExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.27%Chance of exploitation activity in the next 30 days, higher than 17% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 6.4.117Logsign SIEMCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Try Common or Default Usernames and Passwords.
This issue affects Logsign SIEM: from 6.4.101 before 6.4.117.
Text from CVE List
Affected versions 1
- Logsign SIEMaffected: 6.4.101 before 6.4.117CVE List