CVE-2026-49309
Deferred Deferred - Pending Action

Permission Control Flaw in Huawei Settings Module

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Huawei Technologies

Description
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-09
Last Modified
2026-09-09
Generated
2026-09-29
AI Q&A
2026-09-10
EPSS Evaluated
2026-09-27
NVD
CVE-2026-49309
EUVD
EUVD-2026-74616

Affected Vendors & Products

Showing 9 associated CPEs
Vendor Product Version / Range
huawei harmonyos From 4.3.1 (inc) to 4.3.3 (inc)
huawei harmonyos 4.3.1
huawei harmonyos 4.3.0
huawei harmonyos 4.2.0
huawei harmonyos 4.0.0
huawei emui From 15.0.0 (inc) to 16.0.0 (inc)
huawei emui From 14.0.0 (inc) to 15.0.0 (inc)
huawei emui From 14.0.0 (inc) to 14.2.0 (inc)
huawei emui 14.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-264 Permissions, Privileges, and Access Controls

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a permission control vulnerability in the Settings module of Huawei devices. It may allow unauthorized access to sensitive settings, potentially affecting the confidentiality of services.

Impact Analysis

Successful exploitation could lead to unauthorized access to system settings, compromising the confidentiality of data or services on affected Huawei devices.

Compliance Impact

The vulnerability may affect service confidentiality due to improper permission controls, which could lead to unauthorized access to sensitive data. This could potentially impact compliance with standards requiring strict data access controls, such as GDPR or HIPAA, by increasing the risk of data breaches or unauthorized exposure.

Mitigation Strategies

Update affected devices to the latest HarmonyOS or EMUI versions as specified in Huawei's security bulletin. Disable unnecessary permissions for the Settings module and restrict access to sensitive settings.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-49309. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart