https://pwn.watch/i/array-networks-ag-vxag-arrayos-cve-2023-28461 Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway. Added to the CISA KEV catalog on 2024-11-25. CISA lists known use in ransomware campaigns. CVE-2023-28461 was assigned before 2024; the KEV listing came in 2024. en Mon, 25 Nov 2024 00:00:00 GMT https://pwn.watch/i/array-networks-ag-vxag-arrayos-cve-2023-28461 https://pwn.watch/i/array-networks-ag-vxag-arrayos-cve-2023-28461#2024-11-25-b7b04847 Mon, 25 Nov 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p>