CVE-2026-94592 — Armatura LLC Armatura One Use of Hard-coded Credentials
Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique passw…
Published: 2026-10-02 · CVSS: 8.6 · CVSS 4.0
Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can authenticate as the database superuser on a deployment where it has not been changed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7