Permission Control Flaw in Huawei App Management Module
CVE-2026-41987

6.2MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Emui
Vendor
CVE Published:
9 September 2026

What is CVE-2026-41987?

A permission control vulnerability exists within Huawei's app management module, potentially allowing unauthorized access and impacting the overall availability of the system. If exploited, this flaw could result in unauthorized actions being performed on behalf of users, leading to significant security implications. Users are advised to update their systems to mitigate this risk.

Affected Version(s)

EMUI 16.0.0

EMUI 15.0.0

EMUI 14.2.0

References

https://consumer.huawei.com/en/support/bulletin/2026/9/
https://consumer.huawei.com/en/support/bulletinvision/202...

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.