CVE-2026-90924: Default Admin Credentials in Innotim Software's Logsign SIEM

Published Sep 28, 2026
·
Updated

Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Try Common or Default Usernames and Passwords.

This issue affects Logsign SIEM: from 6.4.101 before 6.4.117.

Affected Software

1 affected component
Innotim Software Logsign SIEM>=6.4.101<6.4.117

Event History

Sep 28, 2026
CVE Published
via MITRE·01:53 PM
Data Sourced
via MITRE·01:53 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

Which deployments are affected?

Logsign SIEM versions from 6.4.101 through versions before 6.4.117 are affected. Version 6.4.117 is not identified as affected by the advisory.

2

What does an attacker need to exploit this issue?

An attacker can attempt commonly known or default usernames and passwords. The supplied vector indicates exploitation can be performed remotely, without prior privileges or user interaction.

3

What is the likely impact of successful exploitation?

The severity vector rates confidentiality, integrity, and availability impact as high. Successful use of default credentials could therefore provide broad control or access to affected systems.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203