Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-49301

CVSS 6.2 · Medium EPSS 0.09% · P0

Possible ATT&CK Techniques 1AI

T1530 · Data from Cloud Storage

Affected Version Matrix 7

VendorProductVersion RangeStatus
HuaweiEMUI15.0.0affected
14.2.0affected
14.0.0affected
HuaweiHarmonyOS4.3.1affected
4.3.0affected
4.2.0affected
4.0.0affected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-49301

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5

Affected Products

VendorProductAffected VersionsCPESubscribe
HuaweiHarmonyOS 4.3.1 -
HuaweiEMUI 15.0.0 -

II. Public POCs for CVE-2026-49301

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-49301

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-49301 (2)

Same Patch Batch · Huawei · 2026-08-17 · 10 CVEs total

CVE-2026-493056.2 MEDIUMWiFi增强模块权限控制漏洞影响可用性
CVE-2026-493046.2 MEDIUM设备密钥管理权限控制漏洞影响可用性
CVE-2026-493026.2 MEDIUM通知服务模块权限控制漏洞，影响软件保密性
CVE-2026-493076.2 MEDIUM多模式输入模块权限控制漏洞影响机密性
CVE-2026-493085.5 MEDIUM剪贴板模块权限控制漏洞影响服务机密性
CVE-2026-493035.1 MEDIUM通知模块权限控制漏洞影响可用性
CVE-2026-585614.0 MEDIUMImage Codec空指针解引用漏洞
CVE-2026-585604.0 MEDIUM图像编解码模块空指针解引用漏洞
CVE-2026-493063.3 LOWtime模块UAF漏洞，影响可用性

IV. Related Vulnerabilities

Same product: HarmonyOS
Same vendor: Huawei
Same weakness: CWE-200

V. Comments for CVE-2026-49301

No comments yet

Leave a comment