Everpure vulnerabilities

Products

• FlashArray 2
• Portworx Operator 1

Latest Everpure CVEs

Newest publication first

1. CVE-2026-15140 A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP). Only under specific conditions during the initial provisioning of a Portworx storage cluster, a user hol...

   Published 2026-09-09

   High·CVSS 7.7 EPSS 0.35%

   A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP). Only under specific conditions during the initial provisioning of a Portworx storage cluster, a user holding only limited, namespace-scoped permissions could cause the operator to gran...

2. CVE-2026-6444 A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.

   Published 2026-06-09

   High·CVSS 8.6 EPSS 0.28%

   A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.

3. CVE-2026-6445 A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.

   Published 2026-06-09

   High·CVSS 8.7 EPSS 0.28%

   A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.