Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Armatura LLC Clear all filters
TI-2026-65944 CVE-2026-94591 · GHSA-rpcg-4hqj-wfv3

Armatura LLC Armatura One Use of Hard-coded Cryptographic Key

Priority LOW 38

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00087 Published 2026-10-02 Fixed in 4.7.2, 4.6.1 +1 CWE-321
TI-2026-65945 CVE-2026-94592 · GHSA-rq48-r7v8-mfh6

Armatura LLC Armatura One Use of Hard-coded Credentials

Priority LOW 38

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00127 Published 2026-10-02 Fixed in 4.7.2, 4.6.1 +1 CWE-798
TI-2026-65946 CVE-2026-94593 · GHSA-3j8c-r7f9-v4vm

Armatura LLC Armatura One Insertion of Sensitive Information into Log File

Priority LOW 38

Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00114 Published 2026-10-02 Fixed in 4.7.2, 4.6.1 +1 CWE-532