ICSA-26-274-01

Armatura One Physical Access Control Platform Crippled by Embedded Broker Deserialization and Static Secrets (CVE-2026-94591)

CISA advisory ICSA-26-274-01 warns of embedded ActiveMQ deserialization and hardcoded AES keys in Armatura One, enabling physical security facility takeover.