CVE-2026-41987

Deferred Deferred - Pending Action

Permission Control Flaw in App Management Module

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Huawei Technologies

Description

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-41987

EUVD

EUVD-2026-74614

Affected Vendors & Products

Vendor	Product	Version / Range
huawei	harmonyos	4.3.0
huawei	harmonyos	4.3.1
huawei	harmonyos	4.3.3
huawei	harmonyos	4.2.0
huawei	harmonyos	4.0.0
huawei	emui	16.0.0
huawei	emui	15.0.0
huawei	emui	14.2.0
huawei	emui	14.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-264	Permissions, Privileges, and Access Controls

Attack-Flow Graph

Executive Summary

CVE-2026-41987 is a permission control vulnerability in the app management module of Huawei devices running HarmonyOS or EMUI. It allows unauthorized actions that could disrupt system availability.

Detection Guidance

This vulnerability is specific to Huawei HarmonyOS and EMUI systems and relates to permission controls in the app management module. Detection requires checking system versions and installed applications for unauthorized modifications or unusual behavior in app permissions.

Impact Analysis

Exploitation may cause system unavailability, leading to crashes or service disruptions on affected Huawei devices. This could affect normal device functionality and user experience.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with GDPR, HIPAA, or other standards. The vulnerability primarily affects system availability through permission control issues in the app management module. No explicit mention of data confidentiality or integrity breaches is made.

Mitigation Strategies

Update affected devices to the latest HarmonyOS or EMUI versions as specified in the resources. Disable unnecessary app management permissions and restrict access to sensitive system functions until patches are applied.

Hi! I’m here to help you understand CVE-2026-41987. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70