This vulnerability (CVE-2026-14564) in Logsign SIEM arises from insufficiently protected credentials (CWE-522), which enables an attacker with high privileges to retrieve embedded sensitive data. It affects Logsign SIEM versions starting from 6.4.97 up to but not including 6.4.114. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, and scope change, with high impact on confidentiality, integrity, and low impact on availability.

An attacker with high privileges can retrieve embedded sensitive credentials from affected Logsign SIEM versions, potentially compromising confidentiality and integrity of the system. This could lead to unauthorized access or further exploitation within the environment. Availability impact is low but confidentiality and integrity impacts are high.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published at this time. Users should monitor vendor communications for updates and consider restricting access to affected versions to trusted administrators only until a fix is available.