FlashArray vulnerabilities

2 known vulnerabilities in FlashArray from Everpure. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  FlashArray: Improper Authorization in Handler for Custom URL Scheme

  CVE-2026-6445Jun 9, 2026Everpure

  A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.

• 8.6 High severity

  FlashArray: Authorization Bypass Through User-Controlled Key

  CVE-2026-6444Jun 9, 2026Everpure

  A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.