CVE-2026-17561

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-17561
Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: before 6.4.115.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0717
Configurations

No configuration.

History

23 Oct 2026, 23:10

Type Values Removed Values Added
Summary
  • (es) Control Inadecuado de la Generación de Código (’Inyección de Código’) vulnerabilidad en Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM permite Inyección de Código. Este problema afecta a Logsign SIEM: antes de 6.4.108.
Information

Published : 2026-07-31 13:17

Updated : 2026-10-23 23:10

NVD link : CVE-2026-17561

Mitre link : CVE-2026-17561

CVE.ORG link : CVE-2026-17561

JSON object : View

Products Affected

No product.

CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')