{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Array Networks vulnerabilities","home_page_url":"https://patchfirst.co/vendor/array-networks/","feed_url":"https://patchfirst.co/feed/vendor/array-networks.json","description":"New and newly exploited Array Networks CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2025-66644#kev","url":"https://patchfirst.co/cve/CVE-2025-66644/","title":"[KEV] CVE-2025-66644: Array Networks ArrayOS AG OS Command Injection Vulnerability","content_text":"Array Networks  · ArrayOS AG. In CISA KEV since 2025-12-08. ENISA EUVD lists it as exploited. EPSS 3.4% (higher than 88.9% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Priority 67.6 of 100.","summary":"Array Networks ArrayOS AG OS Command Injection Vulnerability","date_published":"2025-12-08T00:00:00.000Z","date_modified":"2026-06-17T09:57:08.000Z","tags":["kev","T1133","T1059"],"_patchfirst":{"reason":"kev","priority":67.6,"kev":{"dateAdded":"2025-12-08","ransomware":false},"epss":{"score":0.03415,"percentile":0.88875},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Array Networks ","product":"ArrayOS AG","techniqueIds":["T1133","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-28461#kev","url":"https://patchfirst.co/cve/CVE-2023-28461/","title":"[KEV] CVE-2023-28461: Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability","content_text":"Array Networks  · AG/vxAG ArrayOS. In CISA KEV since 2024-11-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 68.1% (higher than 99.32% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1083 File and Directory Discovery. Named in 1 threat report. Priority 78.6 of 100.","summary":"Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability","date_published":"2024-11-25T00:00:00.000Z","date_modified":"2026-08-05T05:16:37.000Z","tags":["kev","ransomware","T1190","T1059","T1083"],"_patchfirst":{"reason":"kev","priority":78.6,"kev":{"dateAdded":"2024-11-25","ransomware":true},"epss":{"score":0.68079,"percentile":0.99324},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Array Networks ","product":"AG/vxAG ArrayOS","techniqueIds":["T1190","T1059","T1083"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}}]}