Read the docs

Array Networks

Records8All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Array Networks records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Arrayos Ag · all components

TI-2025-41028 CVE-2025-66644 · GHSA-hqfm-g725-ccqr

OS command injection in ArrayOS AG

Priority CRITICAL 100KEV

Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0333 Published 2025-12-05 Fixed in 9.4.5.9 CWE-78
Priority LOW 24

The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the backend function call stack after accessing the system with administrator privi…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00787 Published 2023-02-03 No fix listed CWE-787
Open these records in search →