Everpure vulnerabilities
Published CVEs affecting Everpure products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-6445
High · 8.7
CWE-939 Jun 9, 2026
A flaw exists in FlashArray Purity where insufficient filtering of certain data paths…
A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.
CVE-2026-6444
High · 8.6
CWE-639 Jun 9, 2026
Authorization Bypass Through User-Controlled Key (IDOR) in Everpure FlashArray
A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.