CVE-2026-94594

MEDIUMCVSS 4.0

Description

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential.

Timeline

Published:October 2nd, 2026 10:16 PM

Last modified:October 3rd, 2026 4:16 PM

CVSS Scoring

CVSS v3: 4.0 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-532

References & Reports

Advisories, patches, and third-party reports

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-274-01.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01

Source: NIST NVD · Data may lag official sources by up to one minute