CVE-2026-41968

MEDIUM

Huawei HarmonyOS - Permission Control Vulnerability

Title source: manual

Description

Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.

References (1)

Core 1

Core References

https://consumer.huawei.com/en/support/bulletin/2026/5/

Scores

CVSS v3 5.9

EPSS 0.0001

EPSS Percentile 0.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-840

Status published

Products (3)

Huawei/HarmonyOS 5.1.0

Huawei/HarmonyOS 6.0.0

Huawei/HarmonyOS 6.1.0

Published May 15, 2026

Tracked Since May 15, 2026