Firetruck

CVE-2023-28461

KEV · Ransomware
Updated Aug 5, 2026 · PUBLISHED
View KEV entry →

Description

Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
arrayos_agarraynetworks / arrayos_ag>= 0, <= 9.4.0.481affected
n/an/a / n/an/aaffected