What is the CVSS score of CVE-2026-24792?

CVE-2026-24792 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of OpenHarmony are affected by CVE-2026-24792?

A remote code execution vulnerability in OpenHarmony v6.0 and earlier versions affects authenticated users across distributed device ecosystems including smart devices and IoT endpoints, creating…

OpenHarmony CVE-2026-24792

EUVD-2026-30826 HIGH

Signal Handler Race Condition (CWE-364)

2026-05-19 OpenHarmony

GHSA-mv6m-pvcq-372p

RCE

8.1

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

May 19, 2026 - 03:45 vuln.today

DescriptionNVD

in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.

AnalysisAI

Remote code execution in OpenHarmony v6.0 and prior versions allows authenticated remote attackers to execute arbitrary code within pre-installed applications through a race condition flaw (CWE-364). The CVSS 8.1 score reflects high confidentiality and availability impact but no integrity impact, and no public exploit has been identified at time of analysis. …

RemediationAI

Within 24 hours: Conduct comprehensive inventory of all OpenHarmony v6.0 and prior deployments across smart devices, wearables, and IoT endpoints; audit which users have authenticated access to these systems. Within 7 days: Implement network segmentation to isolate OpenHarmony systems from critical infrastructure, enforce multi-factor authentication for accounts with pre-installed application management rights, and enable audit logging for all authenticated sessions. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-24792 vulnerability details – vuln.today

Back