CVE-2026-105947 Innotim Software, Telecommunications, and Consulting Co. Ltd. CVE debrief

Who should care

Logsign SIEM administrators, security teams, and IT personnel responsible for vulnerability management should be aware of this vulnerability and take necessary actions to patch and monitor their systems. They should review and apply the vendor's patch to version 6.4.122 or later, restrict access to sensitive directories and files, and monitor for suspicious file read activities. Additionally, they should conduct a thorough review of system logs for and .

Why it matters

CVE-2026-105947 is a medium-severity Path Traversal vulnerability in Logsign SIEM, requiring attention from administrators and security teams for patching and monitoring.

• Potential unauthorized file reads
• Possible data exposure or leakage
• Need for patch application and verification

Technical summary

The CVE-2026-105947 vulnerability is a Path Traversal issue in Innotim Software's Logsign SIEM, allowing for arbitrary file reads. The vulnerability affects Logsign SIEM versions from 6.4.120 before 6.4.122. The issue requires attention from administrators and security teams for patching and monitoring. The vulnerability can be mitigated by reviewing and applying the vendor's patch, restricting access to sensitive directories and files, and monitoring for suspicious file read activities. The CVE record and source item provide details on the vulnerability, but additional information on exploitation or impact is limited.

Defensive priority

Medium priority for Logsign SIEM administrators and security teams

Recommended defensive actions

• Review and apply the vendor's patch for Logsign SIEM to version 6.4.122 or later
• Restrict access to sensitive directories and files
• Monitor for suspicious file read activities
• Conduct a thorough review of system logs for potential unauthorized file reads
• Perform a vulnerability scan to identify potentially affected systems
• Implement compensating controls for exposed systems while remediation is scheduled and verified
• Track exceptions and retest remediated assets to ensure the vulnerability is properly addressed

Evidence notes

The CVE record and source item provide details on the vulnerability, but additional information on exploitation or impact is limited. There is no evidence of exploitation in the wild, but defenders should verify the patch status of Logsign SIEM deployments and monitor for suspicious file read activities. The CVE Program record and NVD vulnerability detail provide official information on the vulnerability. Supplemental sources may offer additional context on affected systems and potential mitigations.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.