Sensitive Information Exposure in Pure Storage FlashArray Purity

CVE-2026-6445

What is CVE-2026-6445?

A vulnerability in Pure Storage's FlashArray Purity arises due to insufficient filtering of specific data paths. This flaw may allow authenticated users with low privileges to access sensitive information, potentially compromising the integrity and confidentiality of the data stored within the system. Organizations utilizing this product should assess their security posture and implement necessary safeguards to mitigate the risks associated with this vulnerability.

References