CVE-2026-34865Disclosure(huawei / harmonyos)

LOWCVSS 9.1 · CRITICAL

Exploit discussion active in current signal (5 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

1.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • harmonyos

Threat summary

  • Public PoC is present in monitored signal
  • 5 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • General: 1 classified signal
  • 5 total mentions across 1 day

Affected systems

Vendors
Products
harmonyos

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 1d
01345Mentions · 2026-04-13: 5PoC Mentioned / Linked · 2026-04-13: 1Technical Details · 2026-04-13: 404-13
Signal classification2 categories
Disclosure
480.0%
General
120.0%
Referenced assets5 URLs
Full discourse5 posts
  • VulDB 🛡@vuldb
    Disclosure

    We have just added an important vulnerability affecting Huawei HarmonyOS (CVE-2026-34865) https://vuldb.com/vuln/357100

    Post summary

    The text announces that CVE-2026-34865 has been added to a vulnerability database, indicating its importance but providing no technical details, exploit information, or patch guidance.

    01010256
    2.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-34865 Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. https://www.cve.org/CVERecord?id=CVE-2026-34865

    Post summary

    The post announces CVE‑2026‑34865, an out‑of‑bounds write flaw in a web module that could compromise availability and confidentiality, and links to the official CVE record for further details.

    00000115
    57.1K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-34865 Out-of-Bounds Write Vulnerability in WEB Module Affecting Availability and Confidentiality https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34865

    Post summary

    The text announces CVE‑2026‑34865 as an out‑of‑bounds write flaw in a web module that could affect availability and confidentiality, without detailing exploitation or mitigation.

    0000026
    4.0K followersView on X
  • CTIWatch@ctiwatchcloud
    General

    🔍 Today's Top Vulnerabilities 🔴 CVE-2026-34865 | CVSS 10.0 🔴 CVE-2026-6154 | CVSS 9.8 🔴 CVE-2026-6156 | CVSS 9.8 🔗 http://ctiwatch.cloud/vulnerabilities #CVE #Vulnerability #ThreatIntel

    Post summary

    The post lists three high‑severity CVEs with their CVSS scores and links to a CTI watch site, offering no further details on exploits, PoCs, or mitigation steps.

    00000105
    5.6K followersView on X
  • 0day Signal@0dayPublishing
    Disclosure

    🚨 CVE-2026-34865: Huawei (CVSS: 10.0)... Perfect 10.0 CVSS score with zero-click network exploitation against HarmonyOS 6.0.0's web stack - RCE goldmine waiting... https://zerodaysignal.com/vulnerability/CVE-2026-34865 #netsec #vulnerability #CVE #sysadmin #zeroday

    Post summary

    The post announces a zero‑click RCE vulnerability (CVE‑2026‑34865) in Huawei HarmonyOS 6.0.0 with a perfect CVSS score of 10.0, and provides a link to detailed information.

    00000264
    217 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OShuaweiharmonyos6.0.0--

Explore more