עברית

Vulnerability Intelligence

CVE-2026-90924

Critical 9.8

Published
Last modified
NVD status
Deferred

Description

Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Try Common or Default Usernames and Passwords. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117.

References1

Metrics

CVSS 3.1
9.8 CRITICAL Score source: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
0% percentile: 19 · as of 9 November 2026
CWE
CWE-1392

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.