CVE-2026-94594

Medium4.0 Published on Oct 2, 2026

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential.

CVSS score4.0 / 10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness type (CWE)CWE-532

Vulnerabilities

Armatura One Security Failures Put Access-Control Hosts, Databases, and Credentials at Risk

CISA reports five Armatura One flaws, including unauthenticated ActiveMQ RCE and hardcoded credentials exposing databases, hosts and access control.

Oct 2, 202607:15 6 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Armatura One Security Failures Put Access-Control Hosts, Databases, and Credentials at Risk