CVE-2026-94594: Armatura Llc Armatura One

Medium severity, CVSS 4.0. EPSS: 0.1% chance of exploitation in the next 30 days.

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential.

Affected products

• Armatura Llc Armatura One: before 4.7.2 (fixed in 4.7.2)
• Armatura Llc Armatura One Usa: before 4.6.1 (fixed in 4.6.1)

Published 2026-10-02. Last modified 2026-10-06.