← Back to search

CVE-2026-94593

7.8 HIGHpublic exploit available

Published 2026-10-02 · Updated 2026-10-06

AI risk analysis

Summary
The flaw allows the superuser password to be recorded in plain text, posing a significant risk if the server operating system is compromised.
Exploitability
Exploitation is relatively easy if the attacker has access to the server operating system, as they can read the log file containing the password.
Blast radius
If exploited, this flaw could lead to full database access and potential data breaches, impacting the integrity and confidentiality of the database contents.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Disable the backup and restore routine that records the database connection command, or upgrade to the latest version of Armatura One if a patch is available.
auth-bypasslogplain-textdatabase

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the server operating system is available.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-532

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.