{"id":"CVE-2026-105947","kind":"vulnerability","aliases":["CVE-2026-105947"],"related":[],"title":"Logsign SIEM: path traversal flaw in versions 6.4.120 to 6.4.122","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal.\n\nThis issue affects Logsign SIEM: from 6.4.120 before 6.4.122.","summary":"Logsign SIEM from Innotim Software versions 6.4.120 before 6.4.122 contains a path traversal flaw, where input is not restricted to the intended directory. The sources do not say what an attacker can read or write through it.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["logsign-siem","other","self-hosted","siem"],"not_affected_if":["version-outside-6.4.120-to-6.4.122"],"how_to_check":"- Check the installed Logsign SIEM version in its admin interface or on the host; unknown if the sources give an exact path or command.","fix":"- Move Logsign SIEM to `6.4.122` or later; unknown whether the vendor has published a patch notice or workaround beyond this version.","status":"open","published_at":"2026-10-26T12:17:02+00:00","first_seen_at":"2026-10-26T12:29:53+00:00","triaged_at":"2026-10-26T12:31:39+00:00","updated_at":"2026-10-26T12:31:39+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-26T12:31:39Z","model":"claude-haiku-5-5","output":{"fix":"- Move Logsign SIEM to `6.4.122` or later; unknown whether the vendor has published a patch notice or workaround beyond this version.","reach":"unknown","title":"Logsign SIEM: path traversal flaw in versions 6.4.120 to 6.4.122","impact":"medium","summary":"Logsign SIEM from Innotim Software versions 6.4.120 before 6.4.122 contains a path traversal flaw, where input is not restricted to the intended directory. The sources do not say what an attacker can read or write through it.","category":"other","nicknames":[],"who_cares":["logsign-siem","siem","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown file access on the SIEM server; exact impact not stated","analyst_note":"Check the vendor advisory or NVD detail for the vulnerable endpoint, required privileges, and whether reads or writes are possible; sources give only the CVSS score.","how_to_check":"- Check the installed Logsign SIEM version in its admin interface or on the host; unknown if the sources give an exact path or command.","needs_analyst":true,"not_affected_if":["version-outside-6.4.120-to-6.4.122"],"who_is_affected":"Installations of Logsign SIEM from 6.4.120 before 6.4.122 are affected according to NVD. The sources do not say which configurations or roles are exposed, so teams running other versions can likely skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000603,"input_tokens":3337,"output_tokens":539,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-105947':13A,16A '-2026':12A,15A '6.4.120':8A,31B,91C '6.4.122':10A,33B,93C 'affect':87C 'allow':82C 'attack':55B 'co':78C 'consult':77C 'contain':34B 'cve':11A,14A 'directori':47B,68C 'flaw':5A,38B 'host':23B 'improp':60C 'innotim':28B,73C 'input':40B 'intend':46B 'issu':86C 'limit':61C 'logsign':1A,18B,25B,80C,88C 'logsign-siem':17B 'ltd':79C 'path':3A,36B,69C,83C 'pathnam':64C 'read':57B 'restrict':43B,67C 'say':52B 'self':22B 'self-host':21B 'siem':2A,19B,24B,26B,81C,89C 'softwar':29B,74C 'sourc':49B 'telecommun':75C 'travers':4A,37B,70C,84C 'version':7A,30B 'vulner':71C 'write':59B","nicknames":[],"mitigations":[],"who_affected":"Installations of Logsign SIEM from 6.4.120 before 6.4.122 are affected according to NVD. The sources do not say which configurations or roles are exposed, so teams running other versions can likely skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T12:17:02+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"iletisim@usom.gov.tr","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105947","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105947","severity":null,"published_at":"2026-10-26T12:17:02+00:00","modified_at":"2026-10-26T12:17:02+00:00","first_seen_at":"2026-10-26T12:29:53+00:00","fetched_at":"2026-10-26T12:29:53+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}