80
CVEs
1
Critical
8
High
0
KEV
1
PoC
9
Unpatched C/H
3.8%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
1
HIGH
8
MEDIUM
62
LOW
8
Monthly CVE Trend
Affected Products (30)
Harmonyos
815
Emui
549
Magic Ui
180
Secospace Usg6600 Firmware
43
Usg9500 Firmware
42
P30 Firmware
38
S5700 Firmware
28
Nip6800 Firmware
27
Mate 20 Firmware
27
P30 Pro Firmware
25
S7700 Firmware
23
P8 Firmware
22
Secospace Usg6300 Firmware
22
S6700 Firmware
21
Fusionsphere Openstack
21
Secospace Usg6500 Firmware
21
Cloudengine 12800 Firmware
21
Fusioncompute
19
S9700 Firmware
19
S9300 Firmware
18
Mate S Firmware
18
P9 Firmware
18
Uma
18
Ar3200 Firmware
17
S12700 Firmware
17
Mate 30 Firmware
16
Cloudengine 6800 Firmware
16
Nip6600 Firmware
16
P10 Plus Firmware
15
Cloudengine 7800 Firmware
15
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2020-37220 | Huawei HG630 V2 router contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain administrative access by retrieving the device serial number. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.7 | 0.1% | 64 |
PoC
No patch
|
| CVE-2026-34865 | Out-of-bounds heap write in Huawei HarmonyOS WEB module allows unauthenticated remote attackers to execute arbitrary code and exfiltrate sensitive data with no user interaction required. CVSS v4.0 score of 10.0 (Critical) reflects network-based exploitation with low complexity requiring no privileges or user interaction. No public exploit identified at time of analysis. The vulnerability achieves complete compromise of confidentiality, integrity, and availability across both vulnerable and subsequent system scopes. | CRITICAL | 10.0 | 0.0% | 50 |
No patch
|
| CVE-2026-49310 | Unauthenticated remote availability disruption in Huawei HarmonyOS 6.1.0 allows network-accessible attackers to exploit missing permission controls in the event notification module, causing high-severity service outages that propagate beyond the vulnerable component via a scope change. The vulnerability is rooted in CWE-264 (Permissions, Privileges, and Access Controls) and carries a CVSS 3.1 base score of 8.6 with no privilege or user-interaction requirements. Huawei issued remediation guidance in its September 2026 security bulletin covering smartphones, Vision devices, wearables, and laptops; no public exploit code has been identified at time of analysis. | HIGH | 8.6 | 0.2% | 43 |
No patch
|
| CVE-2026-41964 | Race condition in HarmonyOS web component enables local privilege escalation to full system compromise without authentication. The TOCTOU flaw (CWE-362) allows local attackers to achieve high confidentiality, integrity, and availability impact through unauthorized permission escalation. Huawei has released patches via May 2026 security bulletins for both mobile and laptop devices. EPSS data not yet available for this 2026 CVE; no confirmed active exploitation or public POC identified at time of analysis. | HIGH | 8.4 | 0.0% | 42 |
No patch
|
| CVE-2026-58558 | Local information disclosure in Huawei HarmonyOS and EMUI stems from a flawed permission-control check in the file system, letting a local actor read data that should be access-restricted. Exploitation requires local access plus user interaction (CVSS UI:R), and Huawei's own scoring rates it high impact; no public exploit was identified at time of analysis and it is not listed in CISA KEV. Note the vendor CVSS also asserts integrity and availability impact, which the one-line description (confidentiality only) does not substantiate. | HIGH | 7.8 | 0.1% | 39 |
No patch
|
| CVE-2026-34853 | Permission bypass in Huawei HarmonyOS and EMUI LBS (Location-Based Services) module enables highly-privileged local attackers with user interaction to achieve full compromise across security contexts (confidentiality, integrity, availability impact). CVSS 7.7 HIGH severity. No public exploit identified at time of analysis. Attack requires local access, high privileges (administrator/root), user interaction, but succeeds with low complexity once prerequisites met. Scope change (S:C) indicates container escape or privilege boundary violation beyond the vulnerable component. | HIGH | 7.7 | 0.0% | 39 |
No patch
|
| CVE-2026-49314 | Out-of-bounds write in HarmonyOS 6.1.0's rendering and composition module allows a locally executing process to corrupt adjacent memory, with vendor-stated impact to availability and a CVSS vector also indicating potential confidentiality exposure. Affected devices are those running Huawei HarmonyOS version 6.1.0 as confirmed by EUVD-2026-74596. No public exploit code has been identified and the vulnerability does not appear in the CISA KEV catalog at time of analysis. | HIGH | 7.3 | 0.1% | 37 |
No patch
|
| CVE-2026-34856 | Use-after-free in Huawei HarmonyOS communication module allows local attackers to cause denial of service and potentially disclose information without authentication. The vulnerability stems from a race condition (CWE-362) enabling memory corruption with high availability impact. EPSS data not available; no public exploit identified at time of analysis. Vendor has released security bulletin with remediation guidance. | HIGH | 7.3 | 0.0% | 37 |
No patch
|
| CVE-2026-49315 | Denial-of-service in Huawei HarmonyOS and EMUI's input device module allows a local unprivileged attacker to crash affected system components, impacting device availability. The CVSS scope change (S:C) indicates the flaw propagates availability impact beyond the vulnerable input module itself, potentially affecting higher-privileged or dependent subsystems. No public exploit code has been identified and this vulnerability is not listed in CISA KEV at time of analysis. | HIGH | 7.1 | 0.1% | 36 |
No patch
|
| CVE-2026-28553 | HarmonyOS and EMUI theme setting modules fail to enforce proper permission controls, allowing local attackers with user interaction to read sensitive system information across security boundaries. The vulnerability requires physical or local access and user interaction but can compromise confidentiality of protected data; CVSS 6.9 reflects moderate-to-high real-world risk due to local attack surface and CVSS vector showing high confidentiality impact (C:H) despite lower integrity and availability consequences. | MEDIUM | 6.9 | 0.0% | 35 |
No patch
|
| CVE-2026-41970 | Out-of-bounds write in Huawei HarmonyOS and EMUI distributed file system module allows authenticated local attackers to corrupt memory, potentially affecting system availability and integrity. CVSS 6.8 reflects adjacent network access requirement and low attack complexity, but exploitation requires prior authentication and local network presence. No public exploit code or active exploitation confirmed at time of analysis. | MEDIUM | 6.8 | 0.0% | 34 |
No patch
|
| CVE-2026-34864 | Local privilege escalation in HarmonyOS application read module allows unauthenticated local attackers to cause memory corruption through a boundary-unlimited buffer overflow, potentially achieving code execution or system crash with high availability impact. CVSS 6.8 reflects local attack vector with integrity and availability consequences. Huawei has released security bulletins addressing this CWE-119 vulnerability affecting HarmonyOS devices. | MEDIUM | 6.8 | 0.0% | 34 |
No patch
|
| CVE-2026-34863 | Out-of-bounds write in HarmonyOS file system allows local privileged attackers to corrupt memory with high impact on confidentiality, integrity, and availability. The vulnerability affects HarmonyOS across versions and requires high-level local system privileges to exploit, making it a critical concern for multi-user systems and containerized deployments where privilege escalation vectors exist. | MEDIUM | 6.7 | 0.0% | 34 |
No patch
|
| CVE-2026-41976 | Permission control failure in the audio framework of Huawei HarmonyOS and EMUI allows a local attacker with no special privileges, but requiring user interaction, to access confidential audio service data with high confidentiality impact alongside minor integrity and availability effects. The vulnerability stems from improper permission enforcement (CWE-275) within the audio subsystem. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, though the local-attack-vector with user interaction requirement limits mass exploitation. | MEDIUM | 6.6 | 0.0% | 33 |
No patch
|
| CVE-2026-58555 | Permission bypass in the HarmonyOS card module allows a local, unprivileged user - with required user interaction - to circumvent access controls, resulting in high availability impact alongside limited confidentiality and integrity exposure. The vulnerability affects Huawei HarmonyOS across all tracked versions per CPE data and is documented in Huawei's July 2026 security bulletin. No public exploit code and no CISA KEV listing have been identified at time of analysis, keeping real-world risk constrained to local attack scenarios. | MEDIUM | 6.6 | 0.1% | 33 |
No patch
|