PureStorage FlashArray

• CVE-2026-0209 Medium 6.9 Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured. 0.4%
• CVE-2024-3057 Critical 9.8 A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation. 0.4%
• CVE-2024-0005 Critical 9.1 A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration. 0.6%
• CVE-2024-0004 Critical 9.1 A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array. 0.6%
• CVE-2024-0003 Critical 9.1 A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access. 0.5%
• CVE-2024-0002 Critical 10.0 A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array. 0.6%