Logsign SIEM (6.4.101-6.4.116) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/logsign-siem-6.4.101-6.4.116/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 28 Sep 2026 16:20:54 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPath Traversal Vulnerability in Logsign SIEMhttps://feed.craftedsignal.io/briefs/2026-09-logsign-path-traversal/Mon, 28 Sep 2026 16:20:54 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-logsign-path-traversal/Logsign SIEM versions 6.4.101 through 6.4.116 are vulnerable to a path traversal flaw, CVE-2026-90925, which may allow an unauthenticated attacker to access unauthorized files on the host system.Innotim Software's Logsign SIEM product is affected by a path traversal vulnerability identified as CVE-2026-90925. This vulnerability stems from improper validation of user-supplied input when accessing file paths, allowing an attacker to navigate outside of the intended directory structure. The flaw specifically impacts versions 6.4.101 through 6.4.116 of the Logsign SIEM platform. By manipulating file path parameters in HTTP requests, an unauthenticated user could potentially gain unauthorized read access to sensitive files stored on the server, including configuration files, credentials, or system logs. Defenders should prioritize patching affected instances to version 6.4.117 or later to mitigate the risk of information disclosure and potential system compromise.

Impact

Successful exploitation of this vulnerability allows unauthorized file access on the Logsign SIEM server. Depending on the files accessible, this could lead to the exposure of credentials, environment configurations, and other sensitive data, providing an attacker with sufficient reconnaissance to further compromise the network infrastructure where the SIEM is deployed.

Recommendation

  • Upgrade Logsign SIEM to version 6.4.117 or later immediately to patch CVE-2026-90925.
  • Review web server access logs for anomalous requests containing directory traversal sequences (e.g., "../", "..%2f") targeting non-public directories.
  • Limit network access to the Logsign SIEM web interface to trusted management networks only, using firewall controls to mitigate potential remote exploitation attempts.
]]>highadvisoryvulnerabilitypath-traversalweb-application