Brand
Array Networks: actively exploited vulnerabilities
2 vulnerabilities in Array Networks products (ArrayOS AG / vxAG) are in CISA’s catalog of exploited vulnerabilities. Last added: December 8, 2025.
-
1 vulnerability added in the last 12 months
-
2 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Array Networks category to your radar, or open its page.
- Firewalls, VPNs and remote access 2 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- ArrayOS AG / vxAG2 vulnerabilities, Firewalls and VPNs
Name used by CISA: Array Networks. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Array Networks list.
- Rank 1
Array Networks ArrayOS AG / vxAGCVE-2025-66644
Array Networks ArrayOS AG OS Command Injection Vulnerability
CVSS severity 9.8critical
Added Dec 8, 2025
- Rank 2
Array Networks ArrayOS AG / vxAGCVE-2023-28461
Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
Ransomware
CVSS severity 9.8critical
Added Nov 25, 2024
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.