Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Nov 25, 2024

1 new incident, 0 with updates.

Started

  • ClosedPatched

    Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function

    Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway. Added to the CISA KEV catalog on 2024-11-25. CISA lists known use in ransomware campaigns. CVE-2023-28461 was assigned before 2024; the KEV listing came in 2024.

    Array Networks AG/vxAG ArrayOSClosed Nov 25, 2024

Sponsored

Buy sponsor slot · $149/mo