Improper Permission Control in Huawei Theme Settings Module
CVE-2026-28553

6.9MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Emui
Vendor
CVE Published:
13 April 2026

What is CVE-2026-28553?

This vulnerability involves improper permission control within the theme settings module of Huawei products. If successfully exploited, it can compromise service confidentiality, allowing unauthorized access to sensitive information. Organizations using the affected module should review their permissions settings and apply necessary mitigations to protect their data integrity.

Affected Version(s)

EMUI 15.0.0

EMUI 14.2.0

EMUI 14.0.0

References

https://consumer.huawei.com/en/support/bulletin/2026/4/

CVSS V3.1

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.