CVE-2026-58554
Received Received - Intake

Permission Control Flaw in Settings Module Affects Confidentiality

Publication date: 2026-07-15

Last updated on: 2026-07-15

Assigner: Huawei Technologies

Description
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-15
Last Modified
2026-07-15
Generated
2026-07-15
AI Q&A
2026-07-15
EPSS Evaluated
N/A
NVD
CVE-2026-58554
EUVD
EUVD-2026-44659

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
huawei harmonyos 6.1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Compliance Impact

This vulnerability may lead to unauthorized data access, which could violate compliance requirements for data protection standards like GDPR or HIPAA by exposing sensitive user information.

Executive Summary

This is a permission control vulnerability in Huawei's Settings module. It may allow unauthorized access to sensitive data, affecting service confidentiality.

Mitigation Strategies

Apply the latest security patches from Huawei for the Settings module. Monitor Huawei's official bulletins for updates. Restrict access to sensitive settings and review user permissions.

Impact Analysis

Successful exploitation could lead to unauthorized access to sensitive information, potentially compromising personal or confidential data stored on affected devices.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58554. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart