Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,419

Export CSV
CVE-2026-101186

Window Module Denial of Service Vulnerability

DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-101185

Out‑of‑Bounds Read in HarmonyOS Peripheral Module

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-101184

Bluetooth Permission Control Vulnerability Affecting Availability

Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Emui Harmonyos
CVE-2026-101183

Use‑After‑Free in HarmonyOS Location Service Leading to Service Unavailability

UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-101182

Race Condition in HarmonyOS Location Service Affects Availability

Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-101181

Permission Control Vulnerability in HarmonyOS WLAN Module Exposes Network Information

Permission control vulnerability in the WLAN module.  Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-101180

Denial of Service via File Parsing Module in HarmonyOS

DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-101179

Buffer Overflow in HarmonyOS File Preview Causing Availability Disruption

Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-101178

Permission Control Vulnerability in Huawei Autofill Service

Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Emui Harmonyos
CVE-2026-101177

Permission Control Vulnerability in Huawei EMUI and HarmonyOS Optimizer Module

Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Emui Harmonyos
CVE-2026-101176

Permission Control Vulnerability in Huawei EMUI Event Notification Module

Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Emui Harmonyos
CVE-2026-101175

Null Pointer Dereference in HarmonyOS ArkWeb Module Leading to Availability Impact

Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-101174

DoS Vulnerability in DSoftBus Module Leading to Availability Impact

DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-101173

Denial of Service Vulnerability in Huawei HarmonyOS DSoftBus Module

DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-101172

Graphics Module Permission Control Vulnerability Affecting Confidentiality

Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-101171

Permission Control Flaw in HarmonyOS Background Task Management

Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

CVSS 3.1 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-101170

DoS Vulnerability in Huawei HarmonyOS File Parsing Module

DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Harmonyos
CVE-2026-65198

Huawei Default SNMPv3 USM key

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build customization `manifest/build/customization/default_password.lua` sets `AuthenticationKey == EncryptionKey == 7df2f29369e3ac3245b2c9d46b67a0ecd055197e41808a34ef325db2f6422581` for the iBMC product build, and the community seed `account/manufacture/default_password.lua` sets both to `7a2f5b86f20233ec7b7bef49643fbf34d86d0cbf6f1f8f5c52d4f30d4536938b`. These are shipped constants, not per-unit values, and they are not rotated by the Administrator password reset, so they survive account provisioning. This is especially dangerous considering that SNMP access is mapped to full device administration privileges, including system reset and firmware upgrades.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Huawei
Products
Openubmc
CVE-2016-3081

Struts2: RCE via method: prefix when Dynamic Method Invocation is enabled (S2-032)

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.

CVSS 3.1 · 8.1 High EPSS 96.9% KEV · Listed
Vendors
Apache Huawei Oracle
Products
Struts Agile Controller-campus Agile Controller-campus Firmware and 31 more