EUVD-2026-74616
GHSA-89hm-qv2c-76vc
Severity by source
AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Physical access and high complexity reflect Settings UI exploitation; scope change and C:H capture cross-component confidential data exposure with no integrity or availability effect.
Primary rating from Vendor (huawei).
CVSS VectorVendor: huawei
Lifecycle Timeline
2DescriptionCVE.org
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
AnalysisAI
Permission control bypass in the Huawei HarmonyOS and EMUI Settings module allows an attacker with physical access to a device to read confidential data from a protected scope beyond the Settings component. The vulnerability affects HarmonyOS versions 4.0.0 through 4.3.3 and EMUI versions 14.0.0 through 16.0.0, as confirmed by Huawei PSIRT via the September 2026 security bulletin. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Physical access to the target device is required (AV:P) - remote exploitation is impossible. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is moderate-to-low despite the C:H confidentiality sub-score. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the security updates distributed by Huawei in the September 2026 monthly security bulletin, available at https://consumer.huawei.com/en/support/bulletin/2026/9/. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today