PureStorage vulnerabilities

8 published CVEs name PureStorage among the affected products.

Critical 6High 1Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-0207
Sensitive Information Logging Vulnerability in FlashBlade
PureStorage · FlashBlade
High8.5
CVE-2026-0209
Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.
PureStorage · FlashArray
Medium6.9
CVE-2024-3057
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.
PureStorage · FlashArray
Critical9.8
CVE-2024-0005
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP…
PureStorage · FlashArray
Critical9.1
CVE-2024-0004
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.
PureStorage · FlashArray
Critical9.1
CVE-2024-0003
A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing…
PureStorage · FlashArray
Critical9.1
CVE-2024-0002
A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.
PureStorage · FlashArray
Critical10.0
CVE-2023-4976
FlashBlade Authentication Mechanism Vulnerability
PureStorage · FlashBlade
Critical9.3