Known vulnerabilities in ArrayOS

Vendor: Array Networks
Software: ArrayOS
Software CPE: cpe:2.3:h:array_networks:arrayos:*:*:*:*:*:*:*:*
Website: https://arraynetworks.com/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ArrayOS ArrayOS is affected by 2 known vulnerabilities: 1 critical, 1 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119384 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-66644		 CWE-78 High
No
Exploited
 9.4.5.9 08.12.2025 SB20251208137
#VU100948 - Improper Authentication
CVE-2023-28461		 CWE-287 Critical
No
Exploited
 9.4.0.484 26.11.2024 SB2023031557