What’s Vulnerable › Vulnerabilities

CVE-2026-0209

• Severity: medium (CVSS 6.9 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-14 · updated 2026-10-26
• Weakness: CWE-783

Description

Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.

Affected products

• PureStorage FlashArray: from 5.0.0 through 5.3.21; from 6.0.0 through 6.4.10; from 6.5.0 through 6.5.12; from 6.6.0 through 6.6.11; from 6.7.0 through 6.7.6; from 6.8.0 through 6.8.9

References

• https://support.purestorage.com/bundle/m_security_bulletins/page/Pure_Security/topics/concept/c_security_bulletins.html

Get alerted when CVE-2026-0209 or the next vulnerability affects your stack