Critical · 9.8 CVE-2026-17561 EUVD-2026-51534GHSA-6rqw-8xp6-qjhg

Unauthenticated RCE in Innotim Software's Logsign SIEM

Published Jul 31, 2026 · Updated Aug 20, 2026 · Assigned by TR-CERT

Vendor: Innotim Software Telecommunications and Consulting Trade Ltd. Co. Product: Logsign SIEM

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection.

This issue affects Logsign SIEM: before 6.4.115.

Affected products

Vendor	Product	Affected	Fixed
Innotim Software, Telecommunications and Consulting Trade Ltd. Co.	Logsign SIEM	< 6.4.115	6.4.115

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0717 government-resource