CVE-2026-0207

Summary

A vulnerability exists in FlashBlade whereby sensitive information may be logged under specific conditions.

Affected Software

VendorProductVersion RangeStatus
PureStorageFlashBlade4.0.0 <= 4.4.8affected
PureStorageFlashBlade4.6.0 <= 4.6.3affected
PureStorageFlashBlade4.5.0 <= 4.5.13affected

Weaknesses

  • CWE-532: CWE-532 Insertion of sensitive information into log file

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References