CVE-2026-90924 is a use of default credentials vulnerability affecting Logsign SIEM by Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. The affected versions are from 6.4.101 before 6.4.117. This vulnerability allows attackers to authenticate using common or default usernames and passwords, potentially leading to full system compromise. The CVSS v3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to unauthorized access to the Logsign SIEM system, allowing attackers to compromise sensitive data, alter system configurations, and disrupt service availability. The critical CVSS score indicates a severe risk to affected environments.

No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, it is recommended to change all default credentials immediately and enforce strong, unique passwords for all accounts to mitigate the risk.