Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2541▼ 392 respecto a la semana anterior

Críticas / altas1321▲ 41 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)99▼ 428 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-90926	Aplazada	Alta (8.8)	0.29%	—	Innotim Logsign Siem^AI	28/9/2026	28/9/2026	Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117.
CVE-2026-90925	Aplazada	Alta (7.1)	0.28%	—	Innotim Logsign Siem^AI	28/9/2026	28/9/2026	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117.
CVE-2026-90924	Aplazada	Crítica (9.8)	0.27%	—	Innotim Software Telecommunications AND Consultancy Trade Logsign Siem^AI	28/9/2026	28/9/2026	Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Try Common or Default Usernames and Passwords. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117.
CVE-2026-14564	Aplazada	Crítica (9)	0.41%	—	Innotim Software Telecommunications AND Consulting Trade Logsign Siem^AI	17/8/2026	26/8/2026	Insufficiently Protected Credentials vulnerability in Innotim Software Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Retrieve Embedded Sensitive Data. This issue affects Logsign SIEM: from 6.4.97 before 6.4.114.
CVE-2026-17561	Aplazada	Crítica (9.8)	0.56%	—	Innotim Software Telecommunications AND Consulting Trade Logsign Siem^AI	31/7/2026	26/8/2026	Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: before 6.4.115.