[ CVE-2026-94592 · Published 2 Oct 2026 ]
Vulnerability in Armatura LLC Armatura One
CVSS 8.4
EPSS <1%No fix listed yet
[ Description ]Official description
Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can authenticate as the database superuser on a deployment where it has not been changed.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.