Array Networks
Security incidents tagged Array Networks. Newest first.
1 Array Networks incident in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 318
- Longest quiet run: 377 days (Nov 26–Dec 7)
Show 2 older incidents2 older incidents
December 2025 1
HighArray Networks ArrayOS AG: ArrayOS AG OS Command Injection VulnerabilityPatched
Array Networks ArrayOS AG Patched
Array Networks ArrayOS AG contains an OS command injection vulnerability that could allow an attacker to execute arbitrary commands. Added to CISA KEV on 2025-12-08.
Open incident →CVE-2025-66644
November 2024 1
CriticalArray Networks AG and vxAG ArrayOS Missing Authentication for Critical FunctionPatched
Array Networks AG/vxAG ArrayOS Patched
Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway. Added to the CISA KEV catalog on 2024-11-25. CISA lists known use in ransomware campaigns. CVE-2023-28461 was assigned before 2024; the KEV listing came in 2024.
Open incident →CVE-2023-28461
