Vulnerability · Published Oct 2, 2026 · Assigned by icscert

CVE-2026-94592Armatura LLC Armatura One Use of Hard-coded Credentials

High 8.4

In plain English

A high-severity hard-coded credentials in Armatura One from Armatura LLC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).

Severity (CVSS 3.1)8.4High

Exploit odds (30 days)0.1%top 97.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can authenticate as the database superuser on a deployment where it has not been changed.

Affected products (as reported)

Vendor	Product	Versions
Armatura LLC	Armatura One	0 – before 4.7.2
Armatura LLC	Armatura One (USA)	0 – before 4.6.1

Weakness: CWE-798 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In plain English

Official description

Affected products (as reported)

References