Permission Control Vulnerability in Huawei Event Notification Module
CVE-2026-49311

6.2MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
9 September 2026

What is CVE-2026-49311?

This vulnerability resides in the event notification module of Huawei products, where improper permission controls can lead to unauthorized access and potential disruption of service. Exploiting this vulnerability could impact the availability of affected systems, making it crucial for users to remain vigilant and apply necessary security updates promptly.

Affected Version(s)

HarmonyOS 6.1.0

References

https://consumer.huawei.com/en/support/bulletin/2026/9/
https://consumer.huawei.com/en/support/bulletinvision/202...
https://consumer.huawei.com/en/support/bulletinwearables/...

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.