The vulnerability CVE-2026-6444 affects Everpure FlashArray Purity management interface version 6.10.0. It is an authorization bypass issue (CWE-639) where an authenticated user with low privileges can exploit a flaw in the interface to gain access to higher privilege functionality. The CVSS 4.0 base score is 8.6, indicating a high severity with network attack vector, low attack complexity, no user interaction required, and high impact on confidentiality and integrity. The vendor has published the advisory but has not provided a remediation level or patch information yet.

An authenticated low-privileged user may gain unauthorized access to management functions beyond their privileges, potentially leading to unauthorized data access or configuration changes. The vulnerability impacts confidentiality and integrity of the system. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the FlashArray management interface to trusted users only and monitor for suspicious activity from low-privileged accounts. Avoid granting unnecessary privileges to users.