What is GHSA-cmfx-346m-p68q?

GHSA-cmfx-346m-p68q is a security advisory published by GitHub Security Advisories with Medium severity. Armatura One's message broker logs client connection credentials and the associated password in...

Which CVE IDs does GHSA-cmfx-346m-p68q cover?

GHSA-cmfx-346m-p68q covers the following CVE IDs: CVE-2026-94594. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cmfx-346m-p68q?

GHSA-cmfx-346m-p68q has a CVSS v3 base score of 4.0, published by GitHub Security Advisories.

GHSA-cmfx-346m-p68qMediumCVSS 4.0

Armatura One's message broker logs client connection credentials and the associated password in...

Vendor

GitHub Security Advisories

Published

October 3, 2026

Last Modified

October 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-94594 →

📋 Description

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-94594
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-274-01.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01
https://github.com/advisories/GHSA-cmfx-346m-p68q