CVE-2026-0207: Sensitive Information Logging Vulnerability in FlashBlade
Published Apr 14, 2026
·Updated
A vulnerability exists in FlashBlade whereby sensitive information may be logged under specific conditions.
Affected Software
1 affected component
Pure Storage FlashBlade
Remediation
Information
This issue is resolved in the following FlashBlade Purity//FB releases:
* Purity//FB 4.5.14 or later
* Purity//FB 4.6.4 or later
Event History
Apr 14, 2026
CVE Published
via MITRE·05:53 PM
Data Sourced
via MITRE·05:53 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-0207?
CVE-2026-0207 is classified with a moderate severity level due to the potential exposure of sensitive information.
2
How do I fix CVE-2026-0207?
To fix CVE-2026-0207, ensure that your FlashBlade system is updated with the latest security patches provided by Pure Storage.
3
What types of sensitive information could be logged as per CVE-2026-0207?
CVE-2026-0207 could result in the logging of sensitive user data or configuration details under specific operational conditions.
4
Are there any known exploits for CVE-2026-0207?
As of now, there are no publicly disclosed exploits for CVE-2026-0207.
5
What should I do if I'm using an affected version of FlashBlade related to CVE-2026-0207?
If using an affected version of FlashBlade, it is recommended to monitor logs for sensitive information and apply security patches promptly.