CVE-2026-28553 | THREATINT

Description

Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

PUBLISHED Reserved 2026-02-28 | Published 2026-04-13 | Updated 2026-04-13 | Assigner huawei

MEDIUM: 6.9CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L

Problem types

CWE-275 Permission Issues

Product status

Default status

unaffected

4.3.1

affected

4.3.0

affected

4.2.0

affected

4.0.0

affected

Default status

unaffected

15.0.0

affected

14.2.0

affected

14.0.0

affected

References

consumer.huawei.com/en/support/bulletin/2026/4/

cve.org (CVE-2026-28553)

nvd.nist.gov (CVE-2026-28553)

Download JSON