CVE-2026-90925: Path Traversal in Innotim Software's Logsign SIEM

Q: What access does an attacker need to exploit this issue?

The attack vector is network-based and has low attack complexity, but the attacker must already have low-level privileges. No user interaction is required.

Q: What is the expected security impact if exploitation succeeds?

The vulnerability is rated as having high integrity impact and low availability impact. It is not rated as affecting confidentiality, and the impact remains within the vulnerable security authority.

Published Sep 28, 2026

Updated

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Path Traversal.

This issue affects Logsign SIEM: from 6.4.101 before 6.4.117.

Affected Software

1 affected component

Innotim Software Logsign SIEM>=6.4.101<6.4.117

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Logsign SIEM to a version that resolves this vulnerability.
Fixed in 6.4.117

Event History

Sep 28, 2026

CVE Published

via MITRE·01:50 PM

Data Sourced

via MITRE·01:50 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attack vector is network-based and has low attack complexity, but the attacker must already have low-level privileges. No user interaction is required.

What is the expected security impact if exploitation succeeds?