Command and Code Injection

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.CVE-2025-66644Array Networks · CVSS 7.2 · 3.3% likely

   CWE-78

2. Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system. NOTE: ArrayOS AG 10.…CVE-2022-42897Arraynetworks · CVSS 9.8 · 1.6% likely

   CWE-77

3. A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted packet after logging into the affected appliance as an admini…CVE-2023-28460Arraynetworks · 1.6% likely

   CWE-77

4. MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. AG and vxAG 9.3.0.259.x are unaffected.CVE-2023-51707Arraynetworks · CVSS 9.8 · 1.3% likely

   CWE-77

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.