Identity Authentication Bypass in Huawei Window Module
CVE-2026-24916

5.9MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
6 February 2026

What is CVE-2026-24916?

An identity authentication bypass vulnerability exists in Huawei's window module, enabling attackers to gain unauthorized access. Exploiting this flaw may compromise service confidentiality, exposing sensitive information and potentially leading to further exploitation within the network.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HarmonyOS 6.0.0

References

https://consumer.huawei.com/en/support/bulletin/2026/2/

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.