CVE-2026-34860
Received Received - Intake
Access Control Vulnerability in Memo Module Affecting Availability, Confidentiality

Publication date: 2026-04-13

Last updated on: 2026-04-16

Assigner: Huawei Technologies

Description
Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-13
Last Modified
2026-04-16
Generated
2026-06-16
AI Q&A
2026-04-13
EPSS Evaluated
2026-06-15
NVD
CVE-2026-34860
EUVD
EUVD-2026-21802
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
huawei harmonyos 5.1.0
huawei harmonyos 6.0.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is an access control issue found in the memo module. It means that the system does not properly restrict access to certain functions or data within this module.

Impact Analysis

If this vulnerability is successfully exploited, it can impact both the availability and confidentiality of the affected system.

Mitigation Strategies

To mitigate the access control vulnerability in the memo module affecting Huawei HarmonyOS, it is recommended to apply the latest security updates and patches provided by Huawei for HarmonyOS 6.0.0.

The April 2026 security bulletin for Huawei devices addresses multiple vulnerabilities including those in the memo module, so ensuring your system is updated to the latest patched version will help reduce the risk of exploitation.

Compliance Impact

The vulnerability affects availability and confidentiality, which are key aspects of compliance with standards such as GDPR and HIPAA.

Successful exploitation could lead to unauthorized access or denial of service, potentially resulting in breaches of personal data protection and system reliability requirements mandated by these regulations.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-34860. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart