Permission Bypass Vulnerability in Huawei Card Module Affects Devices
CVE-2026-58555

6.6MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
15 July 2026

What is CVE-2026-58555?

A permission bypass vulnerability in the Huawei card module allows unauthorized access, which could lead to a compromise of device availability. Attackers exploiting this flaw may gain the ability to perform unauthorized operations, posing risks to the integrity of the device's functionality. Users are advised to implement necessary updates to mitigate potential threats related to this vulnerability.

Affected Version(s)

HarmonyOS 6.1.0

References

https://consumer.huawei.com/en/support/bulletin/2026/7/
https://consumer.huawei.com/en/support/bulletinlaptops/20...

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.