Arraynetworks - vulnerabilities (CVEs)
8 CVEs in 39 products, 0 in the last 30 days, newest from 2025-12-05.
Products
- Arrayos Ag - 6 CVEs
- Ag - 1 CVEs
- Array Os - 1 CVEs
- Vapv - 1 CVEs
- Vxag - 1 CVEs
- Ag1000 - 0 CVEs
- Ag1000t - 0 CVEs
- Ag1000v5 - 0 CVEs
- Ag1100 - 0 CVEs
- Ag1100v5 - 0 CVEs
- Ag1150 - 0 CVEs
- Ag1200 - 0 CVEs
- Ag1200v5 - 0 CVEs
- Ag1500 - 0 CVEs
- Ag1500fips - 0 CVEs
- Ag1500v5 - 0 CVEs
- Ag1600 - 0 CVEs
- Ag1600v5 - 0 CVEs
- Ah1100 - 0 CVEs
- Apv10650 - 0 CVEs
- Apv11600 - 0 CVEs
- Apv1600 - 0 CVEs
- Apv1600t - 0 CVEs
- Apv1600v5 - 0 CVEs
- Apv1800 - 0 CVEs
- Apv2600 - 0 CVEs
- Apv2600v5 - 0 CVEs
- Apv2800 - 0 CVEs
- Apv3600 - 0 CVEs
- Apv3600v5 - 0 CVEs
- Apv3650 - 0 CVEs
- Apv5600 - 0 CVEs
- Apv5800 - 0 CVEs
- Apv6600 - 0 CVEs
- Apv6600fips - 0 CVEs
- Apv7600 - 0 CVEs
- Apv7800 - 0 CVEs
- Apv800 - 0 CVEs
- Ssl Vpn Client - 0 CVEs
Newest CVEs of Arraynetworks
- CVE-2025-66644 - CVSS 9.8 (critical), 2025-12-05: Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.
- CVE-2014-125121 - CVSS 10 (critical), 2025-07-31: Array Networks vAPV (version 8.3.2.17) and vxAG (version 9.2.0.34) appliances are affected by a privilege escalation vulnerability caused by a combination of…
- CVE-2023-51707 - CVSS 9.8 (critical), 2023-12-22: MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. AG and vxAG 9.3.0.259.x are unaffected.
- CVE-2023-41121 - CVSS 7.5 (high), 2023-08-25: Array AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service processes to crash through abnormal HTTP operations.
- CVE-2023-28460 - CVSS 7.2 (high), 2023-03-15: A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted packet after logging into the affected…
- CVE-2023-28461 - CVSS 9.8 (critical), 2023-03-15: Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway…
- CVE-2023-24613 - CVSS 4.9 (medium), 2023-02-03: The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the backend function…
- CVE-2022-42897 - CVSS 9.8 (critical), 2022-10-13: Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system.…
