CVE-2026-49303
Received Received - Intake

Permission Control Flaw in Huawei Notification Module

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: Huawei Technologies

Description
Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-17
AI Q&A
2026-08-17
EPSS Evaluated
N/A
NVD
CVE-2026-49303
EUVD
EUVD-2026-60076

Affected Vendors & Products

Showing 6 associated CPEs
Vendor Product Version / Range
huawei harmonyos From 4.3.0 (inc) to 4.3.1 (inc)
huawei harmonyos 4.2.0
huawei harmonyos 4.0.0
huawei emui 15.0.0
huawei emui 14.2.0
huawei emui 14.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-264 Permissions, Privileges, and Access Controls

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a permission control vulnerability in the notification module. It allows unauthorized users to perform actions that could affect system availability. The vulnerability has a medium severity with a CVSS score of 5.1.

Detection Guidance

The provided CVE data does not include specific detection methods or commands for identifying this vulnerability on a network or system. General steps may involve checking device permissions, reviewing notification module logs, and verifying HarmonyOS/EMUI versions against affected releases.

Impact Analysis

Successful exploitation may lead to reduced system availability, causing disruptions in normal operations. It could allow attackers to manipulate notifications or interfere with system functions.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. The vulnerability primarily affects availability and has limited impact on integrity and confidentiality, which may indirectly influence compliance but is not explicitly detailed.

Mitigation Strategies

Apply vendor patches or updates for the notification module. Restrict access permissions to the module. Monitor system logs for unusual activity related to the notification module.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-49303. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart