Permission Control Vulnerability in Huawei Event Notification Module
CVE-2026-49310

8.6HIGH

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
9 September 2026

What is CVE-2026-49310?

A permission control flaw exists in the event notification module of various Huawei products. This vulnerability could allow an attacker to exploit the system, potentially leading to unauthorized access and compromising the confidentiality of services. Users of affected Huawei devices are advised to remain vigilant and stay updated with security patches to mitigate risks.

Affected Version(s)

HarmonyOS 6.1.0

References

https://consumer.huawei.com/en/support/bulletin/2026/9/
https://consumer.huawei.com/en/support/bulletinvision/202...
https://consumer.huawei.com/en/support/bulletinwearables/...

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.