Security Advisory catalog CVE-2026-94592 Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory .
cve-program · CVE-2026-94592 Published
Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can authenticate as the database superuser on a deployment where it has not been changed.
Read the publisher's advisory Affected versions, risk and source history
cve-program · CVE-2026-94592 Published Armatura One Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Armatura LLC",
"product": "Armatura One",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.7.2",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "4.7.2"
}
],
"defaultStatus": "unaffected"
} Armatura One (USA) Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Armatura LLC",
"product": "Armatura One (USA)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "4.6.1",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "4.6.1_USA"
}
],
"defaultStatus": "unaffected"
} Original source record · Cite this exact observation · Complete original publisher JSON