Our takeCISA reports active exploitation of two vulnerabilities in Armatura One physical access-control systems (pre-4.7.2) that let attackers reach the database, run arbitrary code as root, or take over the system. Patch to 4.7.2 or later immediately if you run these controllers.Cyber Resilience desk
Sources (1)
- cisa_advisories · cisa_advisories
What this means for you — Security leader:CISA reports active exploitation of multiple vulnerabilities in Armatura One <4.7.2 that can lead to unauthorized database access, arbitrary code execution as highest privilege, or full control of the physical access-control system. Update immediately to 4.7.2 or later if you operate this platform.
What this means for you — Lean IT orgs:If you use Armatura One for physical access control, update it to version 4.7.2 or newer right away. CISA says attackers are already exploiting these flaws to take over the system.
What this means for you — MSP:Check every client running Armatura One and upgrade any instance below 4.7.2 immediately. CISA confirms active exploitation that can yield full system and physical-access control compromise.
What this means for you — Researcher:CISA reports active exploitation of Armatura One <4.7.2 (CVEs including CVE-2023-46604 and CVE-2026-94591). Successful exploitation can enable unauthorized database access, privileged code execution, or full takeover of the physical access-control system.