Huawei Vulnerabilities and Affected Products

Products

HarmonyOS1,089 vulnerabilities
EMUI756 vulnerabilities
Magic UI200 vulnerabilities
NIP680019 vulnerabilities
Secospace USG660015 vulnerabilities
USG950012 vulnerabilities
IPS Module11 vulnerabilities
NGFW Module11 vulnerabilities
Secospace USG630011 vulnerabilities
Secospace USG650011 vulnerabilities
HUAWEI Mate 2010 vulnerabilities
NIP630010 vulnerabilities
NIP660010 vulnerabilities
Harmony OS8 vulnerabilities
HUAWEI P30 Pro7 vulnerabilities
USG6000V7 vulnerabilities
HUAWEI Mate 20 Pro6 vulnerabilities
HUAWEI P306 vulnerabilities
PCManager6 vulnerabilities
CloudEngine 128005 vulnerabilities
CloudEngine 58005 vulnerabilities
CloudEngine 68005 vulnerabilities
CloudEngine 78005 vulnerabilities
CurieM-WFG9B5 vulnerabilities
Emily-L29C5 vulnerabilities

Huawei vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2026-58557MEDIUM	Generated title:Huawei HarmonyOS Expedition Mode Design Defect Affecting Availability Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability. CWE-701Jul 15, 2026	CVSS4.8v3.1	EPSS0.07%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-58554MEDIUM	Generated title:Huawei EMUI and HarmonyOS Settings Module Permission Control Vulnerability Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-200Jul 15, 2026	CVSS6.6v3.1	EPSS0.077%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-58555MEDIUM	Generated title:Huawei HarmonyOS Card Module Permission Bypass Vulnerability Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-264Jul 15, 2026	CVSS6.6v3.1	EPSS0.08%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-58553MEDIUM	Generated title:Huawei HarmonyOS Image Codec Module Out-of-Bounds Read Vulnerability Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-120Jul 15, 2026	CVSS4.0v3.1	EPSS0.089%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-58552MEDIUM	Generated title:HarmonyOS Image Codec Module Out-of-Bounds Read Vulnerability Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-120Jul 15, 2026	CVSS5.1v3.1	EPSS0.088%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-58551MEDIUM	Generated title:HarmonyOS Image Codec Module Out-of-Bounds Read Vulnerability Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-120Jul 15, 2026	CVSS5.1v3.1	EPSS0.088%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-58550MEDIUM	Generated title:Huawei HarmonyOS Image Codec Module Out-of-Bounds Read Vulnerability Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-120Jul 15, 2026	CVSS4.0v3.1	EPSS0.089%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-58549MEDIUM	Generated title:Huawei HarmonyOS Image Codec Module Out-of-Bounds Read Vulnerability Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-120Jul 15, 2026	CVSS4.0v3.1	EPSS0.089%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41982MEDIUM	Generated title:HarmonyOS IPC Module Race Condition Vulnerability Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-416Jun 9, 2026	CVSS6.4v3.1	EPSS0.133%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41981MEDIUM	Generated title:Huawei HarmonyOS IPC Module Out-of-Bounds Write Vulnerability Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-122Jun 9, 2026	CVSS5.3v3.1	EPSS0.072%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41977MEDIUM	Generated title:Huawei EMUI and HarmonyOS Log Service Denial of Service DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability. CWE-190Jun 9, 2026	CVSS5.0v3.1	EPSS0.075%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41976MEDIUM	Generated title:Huawei EMUI and HarmonyOS Audio Framework Permission Control Vulnerability Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-275Jun 9, 2026	CVSS6.6v3.1	EPSS0.079%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41974LOW	Generated title:Huawei EMUI and HarmonyOS Service Notifications Permission Control Vulnerability Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability. CWE-264Jun 9, 2026	CVSS3.6v3.1	EPSS0.074%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41973MEDIUM	Generated title:Huawei EMUI and HarmonyOS Permission Control Vulnerability in Calls Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability. CWE-840Jun 9, 2026	CVSS5.9v3.1	EPSS0.078%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41972MEDIUM	Generated title:HarmonyOS SMS App Path Traversal Vulnerability Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability. CWE-22Jun 9, 2026	CVSS5.4v3.1	EPSS0.155%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41986LOW	Generated title:HarmonyOS File System Logic Bypass Vulnerability Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability. CWE-606Jun 9, 2026	CVSS2.4v3.1	EPSS0.11%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41985MEDIUM	Generated title:HarmonyOS Package Management Module Use-After-Free Vulnerability UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity. CWE-284Jun 9, 2026	CVSS5.1v3.1	EPSS0.073%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41984MEDIUM	Generated title:HarmonyOS Package Management Module Use-After-Free Vulnerability UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity. CWE-284Jun 9, 2026	CVSS5.2v3.1	EPSS0.078%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41983MEDIUM	Generated title:HarmonyOS Browser Kernel Denial of Service Vulnerability DoS vulnerability in the browser kernel. Impact: Successful exploitation of this vulnerability may affect availability. CWE-399Jun 9, 2026	CVSS4.3v3.1	EPSS0.161%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41980MEDIUM	Generated title:HarmonyOS File Preview Module Permission Control Vulnerability Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-200Jun 9, 2026	CVSS5.5v3.1	EPSS0.087%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41979MEDIUM	Generated title:HarmonyOS Print Module Permission Control Vulnerability Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality. CWE-701Jun 9, 2026	CVSS5.5v3.1	EPSS0.075%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41978MEDIUM	Generated title:HarmonyOS Clone Module Permission Control Vulnerability Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-275Jun 9, 2026	CVSS4.4v3.1	EPSS0.075%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41975MEDIUM	Generated title:HarmonyOS Network Management Module Permission Management Vulnerability Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity. CWE-701Jun 9, 2026	CVSS6.3v3.1	EPSS0.067%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41970MEDIUM	Generated title:Huawei EMUI Distributed File System Out-of-Bounds Write Vulnerability Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-787May 15, 2026	CVSS6.8v3.1	EPSS0.131%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-41969MEDIUM	Generated title:Huawei EMUI and HarmonyOS Projection Module Permission Control Vulnerability Permission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-275May 15, 2026	CVSS6.2v3.1	EPSS0.096%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX