Critical Alert 1 Active Exploit Detected Today

CVE-2026-20316 — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability →
Powered by CVE Watchtower
×
July 30, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-66644NVD

Vulnerability Summary

Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.
Severity Level
HIGH(7.2)
Published Date
Dec 5, 2025
Last Modified
Dec 5, 2025
Exploitation Status
ACTIVE
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-78: OS Command Injection ↗
The software constructs all or part of an OS command using externally-influenced input, but does not properly neutralize special elements.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

External References