coldbraid

CVE-2025-66644 Array Networks ArrayOS AG

Array Networks ArrayOS AG contains an OS command injection vulnerability that could allow an attacker to execute arbitrary commands.

CVSS
not scored

CWE-78

On CISA’s exploited list

Array Networks ArrayOS AG OS Command Injection Vulnerability

Added
2025-12-08
Federal patch deadline
2025-12-29
Ransomware use
not known