CVE-2026-94593

High7.8 Published on Oct 2, 2026

Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the server operating system is available.

CVSS score7.8 / 10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-532

Vulnerabilities

Armatura One Security Failures Put Access-Control Hosts, Databases, and Credentials at Risk

CISA reports five Armatura One flaws, including unauthenticated ActiveMQ RCE and hardcoded credentials exposing databases, hosts and access control.

Oct 2, 202607:15 6 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Armatura One Security Failures Put Access-Control Hosts, Databases, and Credentials at Risk