CVE-2026-41986
Deferred
Deferred - Pending Action
File System Logic Bypass Vulnerability
Vulnerability report for CVE-2026-41986, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-06-09
Last updated on: 2026-06-09
Assigner: Huawei Technologies
Description
Description
Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| huawei | harmonyos | 6.1.0 |
| huawei | harmonyos | 6.0.0 |
| huawei | harmonyos | From 6.0.0 (inc) to 6.1.0 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-606 | The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping. |