CVE-2026-0209
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.
Risk Assessment
Incorrect retention enforcement may cause premature deletion or excessive retention of snapshots, affecting compliance and data recovery.
Recommendation
Review retention policy configuration and contact the vendor for a fix; monitor snapshot creation and deletion schedules.
Other vulnerabilities in FlashArray Purity
See all- CVE-2026-6445High
FlashArray Purity has a vulnerability due to insufficient filtering of certain data paths, which could expose sensitive information to an authenticated user with low privileges.
- CVE-2026-6444High
A flaw in the FlashArray Purity management interface allows an authenticated low-privileged user, under specific conditions, to access functionality beyond their assigned privileges.
Original NVD description (English source)
Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS