{"id":"CVE-2026-101176","kind":"vulnerability","aliases":["CVE-2026-101176"],"related":[],"title":"Huawei HarmonyOS and EMUI: permission flaw in event notification management module can expose service data","description":"Permission control vulnerability in the event notification management module.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.","summary":"Huawei's October 2026 phone/tablet bulletin lists a permission control flaw in the event notification management module of HarmonyOS 4.0.0-4.3.3 and EMUI 14.0.0-16.0.0, rated High, which may affect service confidentiality. Huawei lists it among the patches in the October 2026 security update. No exploitation or public PoC is stated.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"HarmonyOS","fixed":["October 2026 security update"],"affected":"4.0.0, 4.2.0, 4.3.0, 4.3.1, 4.3.3","ecosystem":"vendor"},{"name":"EMUI","fixed":["October 2026 security update"],"affected":"14.0.0, 14.2.0, 15.0.0, 16.0.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["emui","harmonyos","huawei","mobile","other"],"not_affected_if":[],"how_to_check":"Check your device's HarmonyOS/EMUI version (Settings > About) against the affected list: HarmonyOS 4.0.0, 4.2.0, 4.3.0, 4.3.1, 4.3.3; EMUI 14.0.0, 14.2.0, 15.0.0, 16.0.0. Then check Settings > System & updates > Software update for the October 2026 patch.","fix":"Install the October 2026 HUAWEI security update (patch listed in the October 2026 bulletin). The bulletin gives no separate fixed build number.","status":"open","published_at":"2026-11-02T07:18:02+00:00","first_seen_at":"2026-11-02T07:21:56+00:00","triaged_at":"2026-11-02T07:22:21+00:00","updated_at":"2026-11-02T07:23:00+00:00","category":"other","confidence":0.8,"triage":{"at":"2026-11-02T07:22:21Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Event notification module has a permission control flaw affecting confidentiality","impact":"medium","summary":"A permission control flaw exists in an event notification management module, per the NVD entry. Successful exploitation may expose service data that should be restricted.","audience":"businesses","category":"other","nicknames":[],"who_cares":[],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Service data readable by unauthorized parties","analyst_note":"Identify the vendor and product behind the event notification module and its affected versions from https://nvd.nist.gov/vuln/detail/CVE-2026-101176.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000569,"input_tokens":4049,"output_tokens":328,"severity_before":"high"},"analyst_status":"done","analyst_note":"Identify the vendor and product behind the event notification module and its affected versions from https://nvd.nist.gov/vuln/detail/CVE-2026-101176.","search":"'-101176':18A,21A '-2026':17A,20A '14.0.0':51B '16.0.0':52B '2026':31B,69B '4.0.0':47B '4.3.3':48B 'affect':57B,95C 'among':63B 'bulletin':33B 'confidenti':59B,97C 'control':37B,80C 'cve':16A,19A 'data':15A 'emui':4A,23A,24B,50B 'event':8A,41B,84C 'exploit':73B,90C 'expos':13A 'flaw':6A,38B 'harmonyo':2A,25B,46B 'harmonyos':22A 'high':54B 'huawei':1A,26B,28B,60B 'impact':88C 'list':34B,61B 'manag':10A,43B,86C 'may':56B,94C 'mobil':27B 'modul':11A,44B,87C 'notif':9A,42B,85C 'octob':30B,68B 'patch':65B 'permiss':5A,36B,79C 'phone/tablet':32B 'poc':76B 'public':75B 'rate':53B 'secur':70B 'servic':14A,58B,96C 'state':78B 'success':89C 'updat':71B 'vulner':81C,93C","nicknames":[],"mitigations":[],"who_affected":"Huawei phones and tablets running HarmonyOS 4.0.0 to 4.3.3 or EMUI 14.0.0 to 16.0.0 are listed as affected. The flaw is in the event notification management module and may expose service data. Devices on HarmonyOS 6.1/7.0 are not listed for this CVE.","tier":"B","verified":{"fix":{"at":"2026-11-02T07:23:00Z","by":"analyst","doc":"https://consumer.huawei.com/en/support/bulletin/2026/10/","run_id":1358},"products":{"at":"2026-11-02T07:23:00Z","by":"analyst","doc":"https://consumer.huawei.com/en/support/bulletin/2026/10/","run_id":1358},"who_affected":{"at":"2026-11-02T07:23:00Z","by":"analyst","doc":"https://consumer.huawei.com/en/support/bulletin/2026/10/","run_id":1358}},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update your Huawei phone or tablet to the latest security update: Settings > System & updates > Software update.","pkeys":["emui","harmonyos"],"ptokens":["emui","harmonyos"],"labels":["emui","harmonyos","high","huawei","mobile","other"],"first_public_at":"2026-11-02T07:18:02+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H","cvss_by":"psirt@huawei.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101176","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101176","severity":null,"published_at":"2026-11-02T07:18:02+00:00","modified_at":"2026-11-02T07:18:02+00:00","first_seen_at":"2026-11-02T07:21:56+00:00","fetched_at":"2026-11-02T07:21:56+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-101176:1358","url":null,"severity":null,"published_at":"2026-11-02T07:23:00+00:00","modified_at":"2026-11-02T07:23:00+00:00","first_seen_at":"2026-11-02T07:23:00+00:00","fetched_at":"2026-11-02T07:23:00+00:00","note":"Primary source: Huawei Oct 2026 phone/tablet bulletin lists CVE-2026-101176 (High, HarmonyOS/EMUI versions). No exploitation or PoC found; no social search done. Fix is the monthly update, no build number."}],"documents":[{"id":50795,"url":"https://consumer.huawei.com/en/support/bulletin/2026/10/","title":"Security Bulletins for HUAWEI Phones/Tablets, October 2026","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}