ArrayOS AG

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.CVE-2025-66644Array Networks · CVSS 7.2 · 3.3% likely

   CWE-78

2. Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system. NOTE: ArrayOS AG 10.…CVE-2022-42897Arraynetworks · CVSS 9.8 · 1.6% likely

   CWE-77

3. MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. AG and vxAG 9.3.0.259.x are unaffected.CVE-2023-51707Arraynetworks · CVSS 9.8 · 1.3% likely

   CWE-77

4. Array AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service processes to crash through abnormal HTTP operations.CVE-2023-41121Arraynetworks · 0.8% likely

   CWE-400

5. The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the backend function call stack after acce…CVE-2023-24613Arraynetworks · CVSS 4.9 · 0.8% likely

   CWE-787

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.