Vulnerabilities

TI-2026-12751 CVE-2026-15140 · GHSA-q9g8-x2gv-frw5

A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift…

LOW 36

A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP).

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00351 Published 2026-09-09 Fixed in 26.3.2 + CWE-266

TI-2026-05652 CVE-2026-6444 · GHSA-x9xp-vjfv-m6vr

Authorization bypass in Everpure FlashArray

LOW 39

A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00279 Published 2026-06-09 No fix listed CWE-639

TI-2026-05653 CVE-2026-6445 · GHSA-w284-7936-m8j9

A flaw exists in FlashArray Purity where insufficient filtering of certain data paths…

LOW 39

A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00279 Published 2026-06-09 No fix listed CWE-939

Vulnerabilities

Filters

A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift…

Authorization bypass in Everpure FlashArray

A flaw exists in FlashArray Purity where insufficient filtering of certain data paths…