CVE-2026-28536 — Authentication Bypass by Primary Weakness in Huawei Harmonyos

CWE-305 — Authentication Bypass by Primary Weakness3 documents3 sources
Severity
8.1HIGHNVD
CNA9.6
EPSS
0.0%
top 89.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Huawei Harmonyos
Timeline
PublishedMar 5

Description

Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.2

Affected Packages2 packages

▶CVEListV5huawei/harmonyos5.1.0, 6.0.0+1
▶NVDhuawei/harmonyos5.1.0, 6.0.0+1

🔴Vulnerability Details

2
CVEList
CVE-2026-28536: Authentication bypass vulnerability in the device authentication module↗2026-03-05
▶
GHSA
GHSA-2fv9-x5cx-m494: Authentication bypass vulnerability in the device authentication module↗2026-03-05
▶
CVE-2026-28536 — Huawei Harmonyos vulnerability | cvebase