CVE-2026-94594mediumCWE-532

CVE-2026-94594: medium-severity vulnerability in Armatura One

Armatura LLC Armatura One Insertion of Sensitive Information into Log File

Published · Updated

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 0.1%
exploitation probability
0.1%top 99% of all CVEs
observed exploitation
nono source reports it
Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Armatura LLC · Armatura OneArmatura LLC · Armatura One (USA)
Related CVEs — Armatura One

In the same product, most dangerous first.

CVE-2026-94592HIGHArmatura LLC Armatura One Use of Hard-coded CredentialsEPSS 0.1%CVE-2026-94593HIGHArmatura LLC Armatura One Insertion of Sensitive Information into Log FileEPSS 0.1%CVE-2026-94591HIGHArmatura LLC Armatura One Use of Hard-coded Cryptographic KeyEPSS 0.1%
References
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-274-01.jsonhttps://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01