CVE-2026-0209

MEDIUM

PureStorage FlashArray Purity Snapshot Retention Policy Misapplication

Generated titleSource: EIP title enrichment
STIX 2.1 vulnerability

Record summary

CVE-2026-0209 has a selected CVSS score of 6.9 (medium).

Description

Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 14, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

FlashArray

Browse PureStorage / FlashArray

Default status: unaffected

CVE List5.0.0 to ≤ 5.3.21affected
6.0.0 to ≤ 6.4.10affected
6.5.0 to ≤ 6.5.12affected
6.6.0 to ≤ 6.6.11affected
6.7.0 to ≤ 6.7.6affected
6.8.0 to ≤ 6.8.9affected
6.9.0 to ≤ 6.9.1affected
6.10.0affected

References

2