Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allow…

Published:

31 juli 2026 om 00:00:00

Alert date:

31 juli 2026 om 16:00:51

Source:

nvd.nist.gov

Security Tools, Enterprise Applications

A Code Injection vulnerability (CVE-2026-17561) has been identified in Logsign SIEM, a product by Innotim Software, Telecommunications and Consulting Trade Ltd. Co. The vulnerability is classified as Improper Control of Generation of Code, allowing attackers to perform code injection attacks. All versions of Logsign SIEM prior to 6.4.108 are affected. The issue was published via the National Vulnerability Database (NVD) and also referenced by a Turkish cybersecurity advisory. Users are advised to upgrade to version 6.4.108 or later to mitigate the risk. The vulnerability carries a high criticality rating. No additional technical details or proof-of-concept exploits are referenced in the current disclosure.

Technical details

Mitigation steps:

Affected products:

Logsign SIEM