CVE-2025-54622: Huawei Harmonyos

High severity, CVSS 7.4. EPSS: 0.1% chance of exploitation in the next 30 days.

Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Affected products

• Huawei Harmonyos: version 5.0.1 only; version 5.0.2 only

Published 2025-08-06. Last modified 2026-06-17.