CVE-2026-14564

CVE-2026-14564 in Logsign SIEM versions 6.4.97 through 6.4.113 exposes embedded credentials with insufficient protection. The CVSS 9.0 score is accurate — a SIEM functions as a master key ring for your entire infrastructure, aggregating credentials for servers, firewalls, cloud platforms, and applications. Retrieving those credentials collapses the need to breach each system individually. The EPSS score of 0.00238 is misleading comfort, not low risk. This metric measures opportunistic mass scanning, not targeted compromise. SIEMs in government, financial, and critical infrastructure are precisely the environments where sophisticated actors conduct direct reconnaissance rather than automated scanning. If your Logsign deployment touches high-value systems, the EPSS is irrelevant — treat the CVSS 9 as your signal. The seventeen-version window (6.4.97–6.4.113) demands a specific response: patch to 6.4.114 immediately, but treat this as a potential confirmed compromise rather than merely a vulnerability. Every version shipped with insecure credential storage, meaning the SIEM was actively collecting and storing credentials insecurely for the entire duration. Each day of that window expanded your exposure. Beyond patching, three urgent actions apply. First, rotate every credential that Logsign used to authenticate against log sources — the 6.4.114 fix likely addresses storage protection going forward, not whether existing credentials were already retrievable. Second, investigate disk images, backups, and snapshots taken during that version window as secondary exposure vectors. Third, model your threat scenarios assuming targeted adversaries specifically engaged this vulnerability during the window — the EPSS was never calibrated for your threat model. A SIEM compromise is worse than most credential leaks because the data it protects is inherently cross-infrastructure. The product's architectural assumption that it is a trusted aggregation point is precisely what allowed this vulnerability to persist across seventeen releases.

Reviewed through automated stages and approved by a human before publication.