CVE-2026-28536
Received Received - Intake
Authentication Bypass in Huawei Device Module Affecting Integrity

Publication date: 2026-03-05

Last updated on: 2026-03-06

Assigner: Huawei Technologies

Description
Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-05
Last Modified
2026-03-06
Generated
2026-06-16
AI Q&A
2026-03-05
EPSS Evaluated
2026-06-15
NVD
CVE-2026-28536
EUVD
EUVD-2026-9795
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
huawei harmonyos 5.1.0
huawei harmonyos 6.0.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-305 The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-28536 is an authentication bypass vulnerability found in the device authentication module of Huawei devices running HarmonyOS. This means that an attacker could bypass the normal authentication process, potentially gaining unauthorized access to the device.

Successful exploitation of this vulnerability compromises both the integrity and confidentiality of the affected system, making it a critical security issue.

Impact Analysis

Exploiting this vulnerability can lead to unauthorized access to the device, which compromises the integrity and confidentiality of the system.

This could result in attackers manipulating or stealing sensitive data, disrupting system operations, or gaining control over device functions.

Given its critical severity (CVSS score 9.6), the impact is significant and could lead to major security breaches.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

To mitigate the CVE-2026-28536 authentication bypass vulnerability, you should immediately apply the security patches provided by Huawei in their March 2026 security update for HarmonyOS versions 6.0.0 and 5.1.0.

This update addresses the critical authentication bypass issue in the device authentication module and includes fixes for other vulnerabilities to enhance overall system security.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-28536. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart