{"items":[{"id":"CVE-2025-66644","published":"2025-12-05T00:00:00.000Z","updated":"2026-02-26T16:57:31.054Z","title":"Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.","severity":"HIGH","score":7.2,"vendor":"Array Networks","product":"ArrayOS AG","kev":true,"epss":0.0333,"kevAdded":"2025-12-08"},{"id":"CVE-2014-125121","published":"2025-07-31T14:52:45.290Z","updated":"2026-04-07T14:03:26.222Z","title":"Array Networks vAPV and vxAG Default Credential Privilege Escalation","severity":"CRITICAL","score":10,"vendor":"Array Networks","product":"vAPV","kev":false,"epss":0.01475,"kevAdded":null}]}