CVE-2026-34860

Received Received - Intake

Access Control Vulnerability in Memo Module Affecting Availability, Confidentiality

Publication date: 2026-04-13

Last updated on: 2026-04-16

Assigner: Huawei Technologies

Description

Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-13

Last Modified

2026-04-16

Generated

2026-07-06

AI Q&A

2026-04-13

EPSS Evaluated

2026-07-05

NVD

CVE-2026-34860

EUVD

EUVD-2026-21802

Affected Vendors & Products

Vendor	Product	Version / Range
huawei	harmonyos	5.1.0
huawei	harmonyos	6.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is an access control issue found in the memo module. It means that the system does not properly restrict access to certain functions or data within this module.

Impact Analysis

If this vulnerability is successfully exploited, it can impact both the availability and confidentiality of the affected system.

Mitigation Strategies

To mitigate the access control vulnerability in the memo module affecting Huawei HarmonyOS, it is recommended to apply the latest security updates and patches provided by Huawei for HarmonyOS 6.0.0.

The April 2026 security bulletin for Huawei devices addresses multiple vulnerabilities including those in the memo module, so ensuring your system is updated to the latest patched version will help reduce the risk of exploitation.

Compliance Impact

The vulnerability affects availability and confidentiality, which are key aspects of compliance with standards such as GDPR and HIPAA.

Successful exploitation could lead to unauthorized access or denial of service, potentially resulting in breaches of personal data protection and system reliability requirements mandated by these regulations.

Hi! I’m here to help you understand CVE-2026-34860. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70