CVE-2026-0209: Purestorage Flasharray

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.

Affected products

• Purestorage Flasharray: from 5.0.0, up to and including 5.3.21; from 6.0.0, up to and including 6.4.10; from 6.5.0, up to and including 6.5.12; from 6.6.0, up to and including 6.6.11; from 6.7.0, up to and including 6.7.6; from 6.8.0, up to and including 6.8.9; …

Published 2026-04-14. Last modified 2026-06-17.