Permission Control Vulnerability in Huawei Device Key Management
CVE-2026-49304

6.2MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
17 August 2026

What is CVE-2026-49304?

A permission control vulnerability has been identified in the device key management module of Huawei products. This flaw could allow unauthorized access, impacting the availability of the system and potentially leading to compromised security measures. The vulnerability emphasizes the importance of robust permission settings and highlights potential risks involved in device key management.

Affected Version(s)

HarmonyOS 6.1.0

References

https://consumer.huawei.com/en/support/bulletin/2026/8/
https://consumer.huawei.com/en/support/bulletinlaptops/20...

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.