All vulnerabilities
CVE-2026-94591

Armatura LLC Armatura One Use of Hard-coded Cryptographic Key

Armatura LLC Armatura One
Open in ThreatlineRecord JSON
CVSS
8.4High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.09%Chance of exploitation activity in the next 30 days, higher than 0% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in4.7.2Also 4.6.1CVE List
Published2 Oct 2026Updated 3 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption key and initialization vector are fixed values embedded in the software itself and are identical across every installation. An attacker with a copy of the installation package can recover this key and initialization vector, and can then decrypt the stored credentials of any specific installation to which the attacker separately obtains the encrypted configuration file.

Text from CVE List

Affected versions 4

  • Armatura Oneaffected: all versions before 4.7.2CVE List
  • Armatura Oneunaffected: 4.7.2CVE List
  • Armatura One (USA)affected: all versions before 4.6.1CVE List
  • Armatura One (USA)unaffected: 4.6.1_USACVE List

References 2