CVE-2024-0001: Purestorage Purity//fa

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges.

Affected products

• Purestorage Purity//fa: from 6.3.0, up to and including 6.3.14; from 6.4.0, up to and including 6.4.10

Published 2024-09-23. Last modified 2026-06-17.