Permission Control Vulnerability in Huawei's App Management Module
CVE-2026-41962

3.6LOW

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
15 May 2026

What is CVE-2026-41962?

A permission control vulnerability exists within Huawei's App Management and Control Module. This flaw may allow unauthorized access to sensitive information, jeopardizing the confidentiality of services. Successful exploitation could enable attackers to manipulate user permissions, leading to potential data breaches.

Affected Version(s)

HarmonyOS 6.1.0

HarmonyOS 6.0.0

References

https://consumer.huawei.com/en/support/bulletin/2026/5/

CVSS V3.1

Score:
3.6
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.