Arrayos Ag
1 CVEs
product
Monthly
Array Networks ArrayOS AG before 9.4.5.9 contains an OS command injection vulnerability (CVE-2025-66644, CVSS 7.2) that has been actively exploited in the wild from August through December 2025. KEV-listed, this vulnerability in the VPN/SSL-VPN appliance enables authenticated attackers to execute arbitrary commands on the network edge device.
Command Injection
Arrayos Ag
NVD
CVSS 3.1
7.2
EPSS
3.1%
CVE-2025-66644
EPSS 3%
CVSS 7.2
HIGH
KEV
THREAT
Act Now
Array Networks ArrayOS AG before 9.4.5.9 contains an OS command injection vulnerability (CVE-2025-66644, CVSS 7.2) that has been actively exploited in the wild from August through December 2025. KEV-listed, this vulnerability in the VPN/SSL-VPN appliance enables authenticated attackers to execute arbitrary commands on the network edge device.
Command Injection
Arrayos Ag
NVD