{"id":"CVE-2026-101174","kind":"vulnerability","aliases":["CVE-2026-101174"],"related":[],"title":"DSoftBus module: denial-of-service flaw can disrupt device availability","description":"DoS vulnerability in the DSoftBus module.\nImpact: Successful exploitation of this vulnerability may affect availability.","summary":"The DSoftBus module, a device-to-device communication component, has a denial-of-service flaw. A successful attack can make the affected service unavailable.","severity":"medium","cvss":5.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["devices","dsoftbus","harmonyos","infrastructure"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T07:18:02+00:00","first_seen_at":"2026-11-02T07:21:56+00:00","triaged_at":"2026-11-02T07:22:27+00:00","updated_at":"2026-11-02T07:22:27+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-11-02T07:22:27Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"DSoftBus module: denial-of-service flaw can disrupt device availability","impact":"low","summary":"The DSoftBus module, a device-to-device communication component, has a denial-of-service flaw. A successful attack can make the affected service unavailable.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["dsoftbus","harmonyos","devices"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"service becomes unavailable to legitimate users","analyst_note":"Sources give only a one-line description; check the NVD entry and the vendor advisory for affected versions, reach and fixed release.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000576,"input_tokens":4048,"output_tokens":342,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-101174':14A,17A '-2026':13A,16A 'affect':45B,61C 'attack':41B 'avail':11A,62C 'communic':30B 'compon':31B 'cve':12A,15A 'denial':4A,35B 'denial-of-servic':3A,34B 'devic':10A,18B,27B,29B 'device-to-devic':26B 'disrupt':9A 'dos':48C 'dsoftbus':1A,19B,23B,52C 'exploit':56C 'flaw':7A,38B 'harmonyo':20B 'impact':54C 'infrastructur':21B 'make':43B 'may':60C 'modul':2A,24B,53C 'servic':6A,37B,46B 'success':40B,55C 'unavail':47B 'vulner':49C,59C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["devices","dsoftbus","harmonyos","infrastructure","medium"],"first_public_at":"2026-11-02T07:18:02+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss_by":"psirt@huawei.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101174","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101174","severity":null,"published_at":"2026-11-02T07:18:02+00:00","modified_at":"2026-11-02T07:18:02+00:00","first_seen_at":"2026-11-02T07:21:56+00:00","fetched_at":"2026-11-02T07:21:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}