Access Control Vulnerability in Huawei Memo Module
CVE-2026-34860

4.1MEDIUM

Key Information:

Vendor

Huawei

Status
Vendor
CVE Published:
13 April 2026

What is CVE-2026-34860?

An access control vulnerability has been identified in the memo module of Huawei products. This flaw could be exploited to bypass authorization measures, compromising both the availability and confidentiality of sensitive information. When successfully attacked, unauthorized users could gain access, thereby increasing the risk of data exposure and system integrity issues. It is crucial for users and administrators to implement mitigation measures as recommended by the vendor.

Affected Version(s)

HarmonyOS 6.0.0

HarmonyOS 5.1.0

References

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.