Permission Control Vulnerability in Huawei Optimizer Module
CVE-2026-101177

3.7LOW

Key Information:

Vendor

Huawei
Status
Harmonyos
Emui
Vendor
CVE Published:
2 November 2026

What is CVE-2026-101177?

A permission control vulnerability exists within the Huawei Optimizer module that may allow unauthorized access, potentially compromising service confidentiality. Successful exploitation could enable attackers to manipulate service functions, exposing sensitive data and impacting the integrity of operational processes.

Affected Version(s)

EMUI 16.0.0

EMUI 15.0.0

EMUI 14.2.0

References

https://consumer.huawei.com/en/support/bulletin/2026/10/

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.