CVE-2026-6445

HighCVSS 8.7

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

FlashArray Purity has a vulnerability due to insufficient filtering of certain data paths, which could expose sensitive information to an authenticated user with low privileges.

Risk Assessment

The risk includes leakage of confidential data, such as configuration or user data, to unauthorized parties.

Recommendation

Contact the vendor (Pure Storage) to obtain the appropriate security patch.

Other vulnerabilities in FlashArray Purity

CVE-2026-6444High
A flaw in the FlashArray Purity management interface allows an authenticated low-privileged user, under specific conditions, to access functionality beyond their assigned privileges.

Original NVD description (English source)

A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.