CVE-2025-66644

Description

Array Networks ArrayOS AG contains an OS command injection vulnerability that could allow an attacker to execute arbitrary commands.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2025-66644
• https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/ag.html
• https://www.jpcert.or.jp/at/2025/at250024.html
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-201500
• https://x.com/ArraySupport/status/1921373397533032590
• https://www.bleepingcomputer.com/news/security/hackers-are-exploiting-arrayos-ag-vpn-flaw-to-plant-webshells/