Is CVE-2026-94594 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-94594?

CVE-2026-94594 has a CVSS v3 severity of MEDIUM (4).

Back

CVE-2026-94594

Description

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential.