Is CVE-2026-41987 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-41987 being exploited in the wild.

How severe is CVE-2026-41987?

Medium severity, with a CVSS score of 6.2, published 9 September 2026.

Which products and versions are affected?

Huawei Emui 14.0.0, 14.2.0, 15.0.0, 16.0.0; Huawei Harmonyos 4.0.0, 4.2.0, 4.3.0, 4.3.1, 4.3.3, 6.1.0.

Is there a fix for CVE-2026-41987?

A patch was published on 2026-09: Security patches included in September 2026 monthly updates Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-41987 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-2026-41987?

Check whether you run Huawei Emui or Huawei Harmonyos at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-41987: Huawei HarmonyOS permission control vulnerability in app management module

CVE-2026-41987 · Severity: medium · CVSS 6.2 · Published 2026-09-09

Huawei's HarmonyOS operating system contains a permission control flaw in its app management module that could allow unauthorized access or actions within the app management system. Successful exploitation may disrupt the normal operation and availability of device functionality, affecting phones, tablets, and other Huawei devices running affected HarmonyOS versions.

Technologies: Huawei Emui, Huawei Harmonyos. Vendors: Huawei.

Quick answers

Is CVE-2026-41987 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-41987 being exploited in the wild.
How severe is CVE-2026-41987?: Medium severity, with a CVSS score of 6.2, published 9 September 2026.
Which products and versions are affected?: Huawei Emui 14.0.0, 14.2.0, 15.0.0, 16.0.0; Huawei Harmonyos 4.0.0, 4.2.0, 4.3.0, 4.3.1, 4.3.3, 6.1.0.
Is there a fix for CVE-2026-41987?: A patch was published on 2026-09: Security patches included in September 2026 monthly updates Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-41987 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-2026-41987?: Check whether you run Huawei Emui or Huawei Harmonyos at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is a permission control vulnerability (privilege escalation or authorization bypass) in the HarmonyOS app management module. The root cause involves improper validation or enforcement of permissions when accessing app management functions. The vulnerability affects multiple HarmonyOS versions (4.0.0 through 6.1.0) and EMUI versions (14.0.0 through 16.0.0). An attacker with local or limited network access could exploit this to bypass permission restrictions. Successful exploitation may impact system availability or allow unauthorized app management operations. Huawei has issued patches as part of monthly security updates released in September 2026.

Affected products

Huawei HarmonyOS 4.0.0, 4.2.0, 4.3.0, 4.3.1, 4.3.3, 6.1.0
Huawei EMUI 14.0.0, 14.2.0, 15.0.0, 16.0.0

Timeline

2026-09-09: disclosed: CVE-2026-41987 publicly disclosed
2026-09: patched: Security patches included in September 2026 monthly updates

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.