Skip to content
OpenAdvisories
High · 8.4 CVE-2026-94592 EUVD-2026-91833GHSA-rq48-r7v8-mfh6

Armatura LLC Armatura One Use of Hard-coded Credentials

Published Oct 2, 2026 · Updated Oct 3, 2026 · Assigned by icscert

Description

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can authenticate as the database superuser on a deployment where it has not been changed.

Affected products

VendorProductAffectedFixed
Armatura Armatura One < 4.7.2 4.7.2
Armatura Armatura One (USA) < 4.6.1 4.6.1

Advisories 1

References