CVE-2026-6444
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A flaw in the FlashArray Purity management interface allows an authenticated low-privileged user, under specific conditions, to access functionality beyond their assigned privileges.
Risk Assessment
The risk involves privilege escalation by an authenticated user, potentially leading to unauthorized access to sensitive system functions.
Recommendation
It is recommended to immediately apply patches provided by the vendor and restrict access to the management interface to trusted users only.
Other vulnerabilities in FlashArray Purity
See all- CVE-2026-6445High
FlashArray Purity has a vulnerability due to insufficient filtering of certain data paths, which could expose sensitive information to an authenticated user with low privileges.
- CVE-2026-0209Medium
Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.
Original NVD description (English source)
A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS