Live › vulnerability › CVE-2026-101186
Huawei's October 2026 security bulletin lists a denial-of-service flaw in the window module of HarmonyOS 6.1.0, rated Medium by Huawei (NVD CVSS 7.5 from Huawei as CNA, network/no auth). Successful exploitation may affect availability. No exploitation or PoC found.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 07:21 UTC. All times on this page are UTC.
Devices running HUAWEI HarmonyOS 6.1.0 (listed in the October 2026 bulletins for phones/tablets and PCs). HarmonyOS 7.0.0 and 4.x/EMUI are not listed for this CVE. Teams that do not use Huawei devices can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| HarmonyOS | vendor | 6.1.0 | – |
6.1.0 without the October 2026 security update is listed as affectedEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.
This page as .md · .json · in your agent: get_signal("CVE-2026-101186")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.