Read the docs

Armatura LLC

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Armatura LLC records in CISA KEV

No Armatura LLC vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-65946 CVE-2026-94593 · GHSA-3j8c-r7f9-v4vm

Armatura LLC Armatura One Insertion of Sensitive Information into Log File

Priority LOW 38

Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00114 Published 2026-10-02 Fixed in 4.7.2, 4.6.1 +1 CWE-532
TI-2026-65945 CVE-2026-94592 · GHSA-rq48-r7v8-mfh6

Armatura LLC Armatura One Use of Hard-coded Credentials

Priority LOW 38

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00127 Published 2026-10-02 Fixed in 4.7.2, 4.6.1 +1 CWE-798
TI-2026-65944 CVE-2026-94591 · GHSA-rpcg-4hqj-wfv3

Armatura LLC Armatura One Use of Hard-coded Cryptographic Key

Priority LOW 38

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00087 Published 2026-10-02 Fixed in 4.7.2, 4.6.1 +1 CWE-321
Open these records in search →