CVE-2022-42897: Array Networks ArrayOS AG

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system. NOTE: ArrayOS AG 10.x is unaffected.

Affected products

• Array Networks ArrayOS AG: up to and including 9.4.0.469

Published 2022-10-13. Last modified 2026-06-17.