VulnSocial

CVE-2026-28536Disclosure(huawei / harmonyos)

LOWCVSS 8.1 · HIGH

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

huawei CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-305

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • harmonyos

Threat summary

  • 4 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • 4 total mentions across 1 day

Affected systems

Vendors
huawei
Products
harmonyos

2 versions affected across 1 product

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-03-05: 4Technical Details · 2026-03-05: 303-05
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets4 URLs
Full discourse4 posts
  • The AI generalist@AIengineerlife
    Disclosure

    🚨 CVE-2026-28536 - CRITICAL Device Auth Module 🤖 Auth bypass in device module allows attackers to circumvent security, compromising integrity & confidentiality. ThreatScore: 96/100 🔗 http://threatmonitor.io/cve/CVE-2026-28536 #cybersecurity #infosec

    Post summary

    The post announces CVE-2026-28536 as a critical authentication bypass in a device module, providing a high threat score but lacking any exploitation, PoC, patch, or mitigation information.

    1000043
    9 followersView on X
  • The Hacker Wire@TheHackerWire
    Disclosure

    🔴 CVE-2026-28536 - Critical Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. https://www.thehackerwire.com/vulnerability/CVE-2026-28536/ https://t.co/4bmZTvdmIW

    Post summary

    The post announces a new critical authentication bypass vulnerability (CVE‑2026‑28536) that could affect integrity and confidentiality, but it does not provide a PoC, exploit code, or remediation details.

    1000058
    124 followersView on X
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2026-28536: CRITICAL] Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.#cve,CVE-2026-28536,#cybersecurity https://cvefind.com/CVE-2026-28536

    Post summary

    A new critical authentication-bypass vulnerability (CVE-2026-28536) affecting device authentication integrity and confidentiality has been disclosed and listed on a CVE database site.

    1000081
    596 followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    General

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-28536 - Cisco Device Authentication Bypass Vulnerability Intel Report: https://ift.tt/oguzPkr

    Post summary

    An alert references CVE-2026-28536 and includes a link to an Intel report, but provides no further technical or exploit details.

    0000040
    343 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OShuaweiharmonyos5.1.0--
OShuaweiharmonyos6.0.0--

Explore more

Back to dashboardhuawei CVEsharmonyos vulnerabilities