CVE-2026-24792

EUVD-2026-30826
in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
OpenHarmonyCNA
8.1 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
openharmonyopenharmony
5.0.3 ≤
𝑥
≤ 6.0
CNA
Common Weakness Enumeration
References
https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2026/2026-04.md