CVE-2026-28540: Huawei Harmonyos

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Affected products

• Huawei Harmonyos: version 5.1.0 only; version 6.0.0 only

Published 2026-03-05. Last modified 2026-06-17.