PatchTheCVEpurestorage vulnerabilities
Recent CVEs affecting purestorage products. 6 tracked.
purestorage has 6 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 6. Most recent: 2025-12-04. Highest priority: CVE-2024-0001 (score 55/100).
- CVE-2025-9127 MEDIUM 5.5 UPGRADE A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions.
- CVE-2024-0005 CRITICAL 9.1 UPGRADE UPGRADE A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary comman
- CVE-2024-0004 CRITICAL 9.1 UPGRADE A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands r
- CVE-2024-0003 CRITICAL 9.1 UPGRADE A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to
- CVE-2024-0002 CRITICAL 10.0 UPGRADE A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote ac
- CVE-2024-0001 CRITICAL 10.0 UPGRADE A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remai
FAQ
How do I fix purestorage vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is purestorage being exploited right now?
None of the tracked purestorage CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which purestorage CVE should I patch first?
CVE-2024-0001 currently ranks highest (55/100): A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remai.