Please see below for the most recent security bulletins. The comprehensive security advisories list is available in our CVE Database.
Legend for Rating/Score: 9.0 - 10.0 Critical || 7.0 - 8.9 High || 4.0 - 6.9 Medium || 0.1 - 3.9 Low
CVEs Reserved by Everpure
|
Title |
CVE |
Type |
Impact |
Published Date |
Impacted Products |
|---|---|---|---|---|---|
| FlashArray Privilege Escalation Vulnerability |
Bulletin |
|
Sept 22, 2026 |
FlashArray |
Security Bulletins/Advisories - OSS
|
Title |
CVE |
Type |
Impact |
Published Date |
Impacted Products |
|---|---|---|---|---|---|
CVE-2026-43284 CVE-2026-43500 |
Advisory/Notice |
Informational |
May 8th, 2026 |
FlashArray, FlashBlade | |
N/A |
Advisory/Notice |
Informational |
April 20th, 2026 |
No Impact |
|
N/A |
Advisory/Notice |
Informational |
April 01, 2026 |
No Impact |
|
|
OpenSSL Vulnerability |
Bulletin |
Low |
February 10, 2026 |
No Impact |
|
|
N/A |
Advisory/Notice |
Informational |
September 4, 2025 |
No Impact |
|
|
Addressing False Positives Flagged by Vulnerability Scanners on Everpure Products |
N/A |
Advisory/Notice |
Informational |
July 10, 2025 |
FlashArray, FlashBlade |
|
NTLM Vulnerability |
CVE-2025-24054 |
Advisory/Notice |
|
April 23, 2025 |
No Impact |
|
Apache Tomcat Vulnerability |
CVE-2025-24813 |
Bulletin |
|
March 19, 2025 |
No Impact |
|
OpenSSH Vulnerabilities |
Bulletin |
|
February 24, 2025 |
No Impact |
|
|
CUPS Vulnerabilities |
Bulletin |
|
September 26, 2024 |
No Impact |
|
|
OpenSSH Vulnerability - RegreSSHion |
Bulletin |
|
July 3, 2024 |
FlashArray, FlashBlade |
|
|
N/A |
Advisory/Notice |
Informational |
June 9, 2024 |
FlashArray, FlashBlade |
|
|
CrushFTP Vulnerability |
Bulletin |
|
May 8, 2024 |
No Impact |
|
|
OpenSSH Vulnerabilities - Terrapin |
Bulletin |
|
December, 2023 |
FlashArray |
|
|
cURL/libcurl Vulnerability |
Bulletin |
|
October, 2023 |
No Impact |
|
|
FlashArray - HTTP/2 Rapid Reset Vulnerability |
Bulletin |
|
October, 2023 |
No Impact |
|
|
FlashBlade - HTTP/2 Rapid Reset Vulnerability |
Bulletin |
|
October, 2023 |
FlashBlade |
|
|
Intel Downfall Vulnerability |
Bulletin |
|
August, 2023 |
No Impact |
|
|
MOVEit Transfer Vulnerabilities |
Bulletin |
|
No Impact |
||
|
Microsoft Netlogon RPC Elevation of Privilege Vulnerability |
Bulletin |
|
November, 2022 |
FlashArray |
|
|
Bulletin |
|
December, 2021 |
FlashArray, FlashBlade, Everpure Cloud Dedicated, Portworx |
||
|
Bulletin |
|
No Impact |
|||
|
OpenSSL v3.0.7 (security-fix release) |
Bulletin |
|
November, 2022 |
No Impact |
|
|
//FB Kerberos-Based NFS Authenticatication Failure w/ MS Kerberos Patch |
Bulletin |
|
FlashBlade |
||
|
Apache Commons Vulnerabilities |
Bulletin |
|
No Impact |
||
|
Linux ksmbd Vulnerability ZDI-22-1690 |
Bulletin |
|
December, 2022 |
No Impact |
|
|
3CX Voice Over Internet Protocol (VOIP) Desktop Client Supply Chain Attack |
Bulletin |
|
No Impact |
||
|
Meltdown and Spectre Vulnerabilities |
Bulletin |
|
No Impact |
||
|
MDS CPU Vulnerabilities |
Bulletin |
|
No Impact |
||
|
Dirty Cow Vulnerability |
Bulletin |
|
FlashArray, FlashBlade |
CVEs Published by Everpure
|
Title |
CVE |
Type |
Impact |
Publish Date |
Impacted Products |
|---|---|---|---|---|---|
| Portworx Operator Vulnerability |
Bulletin |
|
September 8th, 2026 |
Portworx Enterprise |
|
FlashArray Vulnerability |
Bulletin |
|
July 13th, 2026 |
FlashArray |
|
Security Bulletin: FlashArray Privilege Escalation Vulnerability |
Bulletin |
|
July 13th, 2026 |
FlashArray |
|
FlashBlade Sensitive Information Logging Vulnerability |
Bulletin |
|
April 14th, 2026 |
FlashBlade |
|
FlashArray Snapshot Retention Policy Enforcement Vulnerability |
Bulletin |
|
April 14th, 2026 |
FlashArray |
|
|
Portworx Enterprise - Sensitive information logging vulnerability |
Bulletin |
|
December 4, 2025 |
Portworx Enterprise |
|
|
N/A |
Advisory/Notice |
N/A |
June 16, 2025 |
FlashArray |
|
|
FlashArray KEK Logging Vulnerability |
Bulletin |
|
June 16, 2025 |
FlashArray |
|
|
CVE-2025-0051 |
Bulletin |
|
March 4, 2025 |
FlashArray |
|
|
CVE-2025-0052 |
Bulletin |
|
March 4, 2025 |
FlashBlade |
|
|
Security Bulletin for PX Backup Improper Sanitization Vulnerability |
Bulletin |
|
February 20, 2025 |
Portworx Backup |
|
|
Security Bulletin for FlashArray Privilege Escalation Vulnerability |
Bulletin |
|
October 8, 2024 |
FlashArray |
|
|
Security Bulletin for 2024 January FlashArray and FlashBlade Security Vulnerabilities |
Bulletin |
|
September 23, 2024 |
FlashArray, FlashBlade |
|
|
FlashBlade Authentication Mechanism Vulnerability |
Bulletin |
|
FlashBlade |
||
|
Privilege Escalation in VASA |
Bulletin |
|
FlashArray |
||
|
FlashBlade Snapshot Scheduler |
Bulletin |
|
FlashBlade |
||
|
FlashArray pgroup Retention Lock SafeMode Protection |
Bulletin |
|
FlashArray |
||
|
FlashBlade Object Store Protocol |
Bulletin |
|
FlashBlade |
||
|
FlashArray SafeMode Immutable Vulnerability |
Bulletin |
|
FlashArray |
||
|
FlashBlade Object Store Privileged Access Vulnerability |
Bulletin |
|
FlashBlade |
Support Escalation - How to Escalate a Case
Please see the Customer Escalation Procedures and Everpure Technical Support/Escalation pages for additional information.
Performing Purity Upgrades
Performing Purity Upgrades We recommend customers stay up-to-date with the latest software to ensure they benefit from the security improvements and vulnerability fixes. Features such as Self-service Upgrade (SSU) are now available in certain Purity versions to make the upgrade process streamlined and efficient. A walkthrough video of SSU on FlashArray can be found here.
Please contact psirt@purestorage.com or via Slack #psirt-request with any questions or concerns.