ZeusQA
Start free

Known exploited vulnerabilities

Array Networks vulnerabilities attackers have used

Every Array Networks vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 Array Networks vulnerabilities as exploited in the wild, 1 of them added in the last 12 months and 1 used in ransomware campaigns. The most recent is CVE-2025-66644, added Dec 8, 2025. AG/vxAG ArrayOS has the most entries (1).

In KEV, all time
2
Added, last 12 months
1
Used in ransomware
1
New CVEs this week
0

By product

AG/vxAG ArrayOS (1), ArrayOS AG (1).

Every Array Networks entry in CISA KEV

  1. CVE-2025-66644

    Added · due

    Array Networks ArrayOS AG OS Command Injection Vulnerability

    Array Networks ArrayOS AG contains an OS command injection vulnerability that could allow an attacker to execute arbitrary commands.

  2. CVE-2023-28461

    RansomwareAdded · due

    Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

    Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works