CVE-2026-6444

HighCVSS 8.6

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

A flaw in the FlashArray Purity management interface allows an authenticated low-privileged user, under specific conditions, to access functionality beyond their assigned privileges.

Risk Assessment

The risk involves privilege escalation by an authenticated user, potentially leading to unauthorized access to sensitive system functions.

Recommendation

It is recommended to immediately apply patches provided by the vendor and restrict access to the management interface to trusted users only.

Other vulnerabilities in FlashArray Purity

CVE-2026-6445High
FlashArray Purity has a vulnerability due to insufficient filtering of certain data paths, which could expose sensitive information to an authenticated user with low privileges.

Original NVD description (English source)

A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.