CVE-2026-34860 — Improper Access Control in Huawei Harmonyos

CWE-284 — Improper Access Control3 documents3 sources
Severity
4.1MEDIUMNVD
EPSS
0.0%
top 98.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Huawei Harmonyos
Timeline
PublishedApr 13

Description

Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:LExploitability: 1.0 | Impact: 2.7

Affected Packages1 packages

▶CVEListV5huawei/harmonyos5.1.0, 6.0.0+1

🔴Vulnerability Details

2
CVEList
CVE-2026-34860: Access control vulnerability in the memo module↗2026-04-13
▶
GHSA
GHSA-3pf2-jjmr-vrv6: Access control vulnerability in the memo module↗2026-04-13
▶
CVE-2026-34860 — Improper Access Control in Huawei | cvebase