CVE-2026-14564

9.0 criticalEPSS 0.4%

Critical (9.0). EPSS 0.4% chance of exploitation in the next 30 days.

Insufficiently Protected Credentials vulnerability in Innotim Software Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Retrieve Embedded Sensitive Data. This issue affects Logsign SIEM: from 6.4.97 before 6.4.114.

Severity

CVSS 3.1

9.0 critical

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2026-08-17
Modified: 2026-08-26
Record from: the NVD, synced 2026-10-19

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0847

Check your stack JSON