PureStorage vulnerabilities
8 published CVEs name PureStorage among the affected products.
- 8Published CVEs8 of them scored
- 2Last 12 monthspublished in the last year
- 6Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-0207
Sensitive Information Logging Vulnerability in FlashBlade
PureStorage · FlashBlade
High8.5 - CVE-2026-0209
Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.
PureStorage · FlashArray
Medium6.9 - CVE-2024-3057
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.
PureStorage · FlashArray
Critical9.8 - CVE-2024-0005
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP…
PureStorage · FlashArray
Critical9.1 - CVE-2024-0004
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.
PureStorage · FlashArray
Critical9.1 - CVE-2024-0003
A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing…
PureStorage · FlashArray
Critical9.1 - CVE-2024-0002
A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.
PureStorage · FlashArray
Critical10.0 - CVE-2023-4976
FlashBlade Authentication Mechanism Vulnerability
PureStorage · FlashBlade
Critical9.3