CVE-2026-105947
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Logsign SIEM affects versions from 6.4.120 before 6.4.122. It may allow access to files outside the intended directory.
Risk Assessment
Path Traversal can allow an attacker to read or manipulate files outside the allowed directory, potentially leading to data disclosure or further system compromise.
Recommendation
Update Logsign SIEM to version 6.4.122 or later.
Other vulnerabilities in Logsign SIEM
See all- CVE-2026-90926High
Code Injection vulnerability in Logsign SIEM by Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Allows execution of arbitrary code. The issue affects versions from 6.4.101 before 6.4.117.
- CVE-2026-90925High
Path Traversal vulnerability in Logsign SIEM by Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Allows access to files outside the allowed directory. The issue affects versions from 6.4.101 before 6.4.117.
- CVE-2026-90924Critical
A vulnerability in Logsign SIEM allows an attacker to use default or common usernames and passwords. The issue affects versions from 6.4.101 before 6.4.117.
- CVE-2026-14564Critical
In Logsign SIEM, there is an insufficiently protected credentials vulnerability that allows retrieving embedded sensitive data. Affects versions from 6.4.97 before 6.4.114.
- CVE-2026-17561Critical
A Code Injection vulnerability in Logsign SIEM (before 6.4.115) allows code injection.
Original NVD description (English source)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS