Everpure

Products

ProductCVEsExploitedLatest
FlashArray2–Jun 9, 2026
Portworx Operator1–Sep 9, 2026

Exploited and recent CVEs

  • CVE-2026-15140 High 7.7 A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP). Only under specific conditions during the initial provisioning of a Portworx storage cluster, a user hol 0.4%
  • CVE-2026-6444 High 8.6 A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges. 0.3%
  • CVE-2026-6445 High 8.7 A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges. 0.3%