Read the docs

Array Networks

Records8All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Array Networks records in CISA KEV
TI-2025-41028 Array Networks ArrayOS AG OS Command Injection Vulnerability Priority CRITICAL 100KEV 2025-12-08TI-2023-13002 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2024-11-25

Components

Products in the NVD configurations · select one to filter the records
Arrayos Ag 6 records CRITICAL Array Os 1 record LOW

Records

8 records

TI-2025-41028 CVE-2025-66644 · GHSA-hqfm-g725-ccqr

OS command injection in ArrayOS AG

Priority CRITICAL 100KEV

Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0333 Published 2025-12-05 Fixed in 9.4.5.9 CWE-78
TI-2014-08420 CVE-2014-125121 · GHSA-wwvj-rx6h-pgx7

Array Networks vAPV and vxAG Default Credential Privilege Escalation

Priority HIGH 82

Array Networks vAPV (version 8.3.2.17) and vxAG (version 9.2.0.34) appliances are affected by a privilege escalation vulnerability caused by a combination of hardcoded SSH credentials (or SSH private key) and insecure pe…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01475 Published 2025-07-31 No fix listed CWE-732
TI-2023-10226 CVE-2023-24613 · GHSA-h4g9-6mgj-wrmj

The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a…

Priority LOW 24

The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the backend function call stack after accessing the system with administrator privi…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00787 Published 2023-02-03 No fix listed CWE-787
Open these records in search →