MajorCritical vulnerability

CVE-2026-94592 (CVSS 8.6)

NVD · officialPublished Oct 2, 2026Risk 37/100EPSS 0.1%

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can authenticate as the database superuser on a deployment where it has not been changed.

Technical details

CVSS

8.6

AV:LocalAC:LowPR:NoneUI:None

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source