CVE-2025-66644

🗓️ 05 Dec 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 16 Views

CVE-2025-66644 allows command injection in ArrayOS AG before 9.4.5.9, exploited in the wild in 2025.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2025-66644	5 Dec 202521:23	–	circl
CISA KEV Catalog	Array Networks ArrayOS AG OS Command Injection Vulnerability	8 Dec 202500:00	–	cisa_kev
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	8 Dec 202512:00	–	cisa
CNNVD	Array Networks ArrayOS AG 操作系统命令注入漏洞	5 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-66644	5 Dec 202500:00	–	cvelist
EUVD	EUVD-2025-201500	5 Dec 202521:30	–	euvd
NVD	CVE-2025-66644	5 Dec 202519:15	–	nvd
OSV	CVE-2025-66644	5 Dec 202519:15	–	osv
Positive Technologies	PT-2025-49310	20 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-66644	6 Dec 202500:31	–	redhatcve

NVD

Vulners

Node

arraynetworks arrayos_agRange<9.4.5.9

AND

arraynetworks ag1000Match-

arraynetworks ag1000tMatch-

arraynetworks ag1000v5Match-

arraynetworks ag1100Match-

arraynetworks ag1100v5Match-

arraynetworks ag1150Match-

arraynetworks ag1200Match-

arraynetworks ag1200v5Match-

arraynetworks ag1500Match-

arraynetworks ag1500fipsMatch-

arraynetworks ag1500v5Match-

arraynetworks ag1600Match-

arraynetworks ag1600v5Match-

arraynetworks vxagMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "ArrayOS AG",
    "vendor": "Array Networks",
    "versions": [
      {
        "lessThan": "9.4.5.9",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
x	www.x.com/ArraySupport/status/1921373397533032590
bleepingcomputer	www.bleepingcomputer.com/news/security/hackers-are-exploiting-arrayos-ag-vpn-flaw-to-plant-webshells/
jpcert	www.jpcert.or.jp/at/2025/at250024.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

10 Dec 2025 02:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.2 - 9.8

EPSS0.02026

SSVC

array networks arrayos ag command injection before 9.4.5.9 wild exploitation 2025