Advisories · Technology

PureStorage FlashArray.

Every CVE that names PureStorage FlashArray among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-0209 CVE record

CVSS 6.9 Medium

PureStorage FlashArray: Under certain administrative conditions…
- PureStorage FlashArray
- CWE-783
Not analysed yet 14 Apr 2026
CVE-2024-3057 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper privilege management in PureStorage FlashArray
- PureStorage FlashArray
- Privilege escalation
Not analysed yet 8 Oct 2024
CVE-2024-0005 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in PureStorage FlashArray and others
- PureStorage FlashArray
- PureStorage FlashBlade
- Command injection
Not analysed yet 23 Sept 2024
CVE-2024-0004 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Code injection in PureStorage FlashArray
- PureStorage FlashArray
- Code injection
Not analysed yet 23 Sept 2024
CVE-2024-0003 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper privilege management in PureStorage FlashArray
- PureStorage FlashArray
- Privilege escalation
Not analysed yet 23 Sept 2024
CVE-2024-0002 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper authentication in PureStorage FlashArray
- PureStorage FlashArray
- Authentication bypass
Not analysed yet 23 Sept 2024