CVE-2026-6444: Everpure Flasharray

High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.

Affected products

• Everpure Flasharray: from 6.10.0, up to and including 6.10.5

Published 2026-06-09. Last modified 2026-07-23.