Description
Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Array Networks | ArrayOS AG | < 9.4.5.9 | 9.4.5.9 |
High · 7.2
Known exploited CVE-2025-66644
EUVD-2025-201500GHSA-hqfm-g725-ccqr
Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.
Published Dec 5, 2025 · Updated Feb 26, 2026 · Assigned by mitre