Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-94592

Armatura LLC Armatura One Use of Hard-coded Credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can authenticate as the database superuser on a deployment where it has not been changed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Armatura LLC Armatura One

Default version status: unaffected

  • 0 to < 4.7.2affected
  • 4.7.2unaffected

Armatura LLC Armatura One (USA)

Default version status: unaffected

  • 0 to < 4.6.1affected
  • 4.6.1_USAunaffected

References