Live › vulnerability › CVE-2026-101176
Huawei's October 2026 phone/tablet bulletin lists a permission control flaw in the event notification management module of HarmonyOS 4.0.0-4.3.3 and EMUI 14.0.0-16.0.0, rated High, which may affect service confidentiality. Huawei lists it among the patches in the October 2026 security update. No exploitation or public PoC is stated.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 07:21 UTC. All times on this page are UTC.
Huawei phones and tablets running HarmonyOS 4.0.0 to 4.3.3 or EMUI 14.0.0 to 16.0.0 are listed as affected. The flaw is in the event notification management module and may expose service data. Devices on HarmonyOS 6.1/7.0 are not listed for this CVE.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| HarmonyOS | vendor | 4.0.0, 4.2.0, 4.3.0, 4.3.1, 4.3.3 | October 2026 security update |
| EMUI | vendor | 14.0.0, 14.2.0, 15.0.0, 16.0.0 | October 2026 security update |
4.0.0, 4.2.0, , , ; EMUI , , , 4.3.04.3.14.3.314.0.014.2.015.0.016.0.0Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
This page as .md · .json · in your agent: get_signal("CVE-2026-101176")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.