CVE-2026-90926
Code Injection in Innotim Software's Logsign SIEM
Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM
CVSS
8.8HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.29%Chance of exploitation activity in the next 30 days, higher than 20% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 6.4.117Logsign SIEMCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Code Injection.
This issue affects Logsign SIEM: from 6.4.101 before 6.4.117.
Text from CVE List
Affected versions 1
- Logsign SIEMaffected: 6.4.101 before 6.4.117CVE List