Medium 6.5

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...

CVE-2026-105947 First seen on SecPulse Oct 26, 20:45

Affected packages

Ecosystem	Package	Affected	Fixed
Innotim Software, Telecommunications, and Consulting Co. Ltd.	Logsign SIEM	≥ 6.4.120, < 6.4.122	6.4.122

Original description The description as published by the source.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal.

This issue affects Logsign SIEM: from 6.4.120 before 6.4.122.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 6.5; CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published: Oct 26, 2026
First seen on SecPulse: Oct 26, 20:45
GHSA: GHSA-pg99-7cpg-92c9
CWE: CWE-22

NVD GitHub Advisory

Tags(click for explanation)

Attack Types

Path Traversal

CWE

CWE-22

All

Innotim Software Telecommunications And Consulting Co Ltd Logsign Siem

Detection sources

NIST National Vulnerability DatabaseOct 26, 22:43
GitHub Security Advisories (Global)Oct 26, 21:32
CVE.org (CVE Program・cvelistV5)Oct 26, 23:35