Paper/Archive/CVE-2026-90924

CVE-2026-90924

Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM — Default Admin Credentials in Innotim Software's Logsign SIEM

EPSS 0.3%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 19.0.190 × 203.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Try Common or Default Usernames and Passwords. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117.

Affected

ProductAffectedFixed inSource

Logsign SIEM6.4.101 – < 6.4.1176.4.117CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1202