Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-26474 in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios. https://www.cve.org/CVERecord?id=CVE-2025-26474
Post summary
The post reports a local input‑validation flaw (CVE-2025-26474) affecting OpenHarmony v5.0.3 and earlier, with limited details on the vulnerability and no evidence of exploitation or patch availability.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2025-26474 - communication_ipc an improper input validation vulnerability Intel Report: https://ift.tt/Ek9aBwc
Post summary
An Intel report highlights CVE-2025-26474 as an improper input validation flaw in communication_ipc, but no PoC, exploit, active use, patches, or debunking is mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | openatom | openharmony | 5.0.3 | - | - |