CVE-2026-41966

MEDIUM

Huawei HarmonyOS - Privilege Escalation

Title source: llm

Description

Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

References (1)

Core 1

Core References

https://consumer.huawei.com/en/support/bulletin/2026/5/

Scores

CVSS v3 5.6

EPSS 0.0002

EPSS Percentile 6.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-840

Status published

Products (3)

Huawei/HarmonyOS 5.1.0

Huawei/HarmonyOS 6.0.0

Huawei/HarmonyOS 6.1.0

Published May 15, 2026

Tracked Since May 15, 2026