CVE-2026-24792: Openharmony

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.

Affected products

• Openharmony Openharmony: from v5.0.3, up to and including v6.0

Published 2026-05-19. Last modified 2026-07-24.