{"id":"CVE-2026-94591","published":"2026-10-02T22:16:56.023","lastModified":"2026-10-06T15:15:48.310","description":"Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption key and initialization vector are fixed values embedded in the software itself and are identical across every installation. An attacker with a copy of the installation package can recover this key and initialization vector, and can then decrypt the stored credentials of any specific installation to which the attacker separately obtains the encrypted configuration file.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-321"],"vendors":[],"products":[],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-274-01.json","tags":[]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01","tags":[]}],"exploitRefs":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-274-01.json","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw lies in the fixed encryption key and initialization vector used by Armatura One, allowing attackers to decrypt sensitive credentials if they have access to the installation package and the encrypted configuration file.","exploitability":"Exploitation is moderately hard as it requires access to the installation package and the encrypted configuration file, but once obtained, the attacker can decrypt the credentials.","blast_radius":"If exploited, the impact is high, as it could lead to full compromise of the stored database and message-broker credentials, potentially affecting multiple installations with identical keys.","remediation":"Disable the feature that stores credentials in the install configuration file or use a unique encryption key for each installation.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["encryption","credentials","fixed-key"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-04T08:41:28.101Z"}}