CVE-2026-28553: High severity Huawei Harmonyos vulnerability
Published Apr 13, 2026
·Updated
Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Affected Software
7 affected components
Huawei Harmonyos=4.0.0
Huawei Harmonyos=4.2.0
Huawei Harmonyos=4.3.0
Huawei Harmonyos=4.3.1
Huawei Emui=14.0.0
Huawei Emui=14.2.0
Huawei Emui=15.0.0
Event History
Apr 13, 2026
CVE Published
via MITRE·03:53 AM
Data Sourced
via MITRE·03:53 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-28553?
CVE-2026-28553 is classified as a high-severity vulnerability due to its potential impact on service confidentiality.
2
How do I fix CVE-2026-28553?
To fix CVE-2026-28553, update to the latest version of Huawei HarmonyOS or EMUI as specified in the security bulletin.
3
Which Huawei software is affected by CVE-2026-28553?
CVE-2026-28553 affects Huawei HarmonyOS versions 4.0.0, 4.2.0, 4.3.0, 4.3.1 and EMUI versions 14.0.0, 14.2.0, and 15.0.0.
4
What type of vulnerability is CVE-2026-28553?
CVE-2026-28553 is an improper permission control vulnerability in the theme setting module.
5
What could happen if CVE-2026-28553 is exploited?
Successful exploitation of CVE-2026-28553 may potentially compromise service confidentiality.