CVE-2026-6445
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
FlashArray Purity has a vulnerability due to insufficient filtering of certain data paths, which could expose sensitive information to an authenticated user with low privileges.
Risk Assessment
The risk includes leakage of confidential data, such as configuration or user data, to unauthorized parties.
Recommendation
Contact the vendor (Pure Storage) to obtain the appropriate security patch.
Other vulnerabilities in FlashArray Purity
See all- CVE-2026-6444High
A flaw in the FlashArray Purity management interface allows an authenticated low-privileged user, under specific conditions, to access functionality beyond their assigned privileges.
- CVE-2026-0209Medium
Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.
Original NVD description (English source)
A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS