HUAWEI
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| HarmonyOS | 1128 | – | Nov 2, 2026 |
| EMUI | 766 | – | Nov 2, 2026 |
| Magic UI | 200 | – | Sep 16, 2022 |
| NIP6800 | 16 | – | Dec 28, 2024 |
| Secospace USG6600 | 12 | – | Dec 28, 2024 |
| Secospace USG6500 | 8 | – | Dec 28, 2024 |
| NGFW Module | 8 | – | Dec 28, 2024 |
| HUAWEI Mate 20 | 8 | – | Dec 27, 2024 |
| IPS Module | 8 | – | Dec 28, 2024 |
| Harmony OS | 8 | – | Jul 15, 2026 |
| Secospace USG6300 | 8 | – | Dec 28, 2024 |
| NIP6600 | 7 | – | Dec 28, 2024 |
| NIP6300 | 7 | – | Dec 28, 2024 |
| USG6000V | 7 | – | Dec 28, 2024 |
| CloudEngine 5800 | 5 | – | Dec 29, 2020 |
| CloudEngine 6800 | 5 | – | Dec 29, 2020 |
| CloudEngine 7800 | 5 | – | Dec 29, 2020 |
| USG9500 | 5 | – | Jul 17, 2020 |
| Secospace USG6600, USG9500 | 5 | – | Feb 18, 2020 |
| CurieM-WFG9B | 5 | – | May 28, 2024 |
| CloudEngine 12800 | 5 | – | Dec 29, 2020 |
| HUAWEI P30 Pro | 5 | – | Dec 27, 2024 |
| HUAWEI P30 | 4 | – | Dec 27, 2024 |
| CV81-WDM FW | 4 | – | Dec 20, 2024 |
| HUAWEI Mate 20 Pro | 4 | – | Dec 27, 2024 |
| EnzoH-W5611T | 3 | – | Aug 8, 2025 |
| Aslan-AL10 | 3 | – | Dec 28, 2022 |
| Honor V10 | 3 | – | Apr 27, 2020 |
| GaussDB 200 | 3 | – | Feb 18, 2020 |
| BiSheng-WNM | 3 | – | Jun 16, 2023 |
| FusionCompute | 2 | – | Dec 27, 2024 |
| Honor Magic2 | 2 | – | Feb 17, 2020 |
| Lion-AL00C | 2 | – | Dec 27, 2024 |
| openBMC | 2 | – | Oct 13, 2026 |
| HUAWEI Mate 20 X | 2 | – | Dec 7, 2020 |
| E6878-370 | 2 | – | May 29, 2020 |
| HEGE-560 | 2 | – | Feb 18, 2020 |
| YaleP-AL10B | 2 | – | Dec 27, 2024 |
| HUAWEI 4G Router B612 | 2 | – | Dec 27, 2024 |
| HarmonyOS AILife Solution 8.0 | 2 | – | Dec 28, 2024 |
| AR6000 | 2 | – | Dec 12, 2023 |
| WS7206-10 | 2 | – | Dec 28, 2024 |
| Honor V30 | 2 | – | Jul 17, 2020 |
| Marie-AL00AY | 1 | – | May 21, 2020 |
| Marie-AL00BX | 1 | – | May 21, 2020 |
| Marie-L03BX | 1 | – | May 21, 2020 |
| Marie-L21BX | 1 | – | May 21, 2020 |
| Marie-L22BX | 1 | – | May 21, 2020 |
| Marie-L23BX | 1 | – | May 21, 2020 |
| Mate 30 Pro | 1 | – | Jul 17, 2020 |
| Moana-AL00B | 1 | – | Jul 17, 2020 |
| Myna | 1 | – | Dec 27, 2024 |
| NE40E | 1 | – | May 29, 2020 |
| NE40E-F | 1 | – | May 29, 2020 |
| NE40E-M | 1 | – | May 29, 2020 |
| NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, USG9500 | 1 | – | Feb 17, 2020 |
| openUBMC | 1 | – | Oct 13, 2026 |
| OSCA-550 | 1 | – | Feb 18, 2020 |
| OSCA-550, OSCA-550A | 1 | – | Feb 18, 2020 |
| OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X | 1 | – | Feb 18, 2020 |
| OSCA-550A | 1 | – | Feb 18, 2020 |
| OSCA-550AX | 1 | – | Feb 18, 2020 |
| OSCA-550AX, OSCA-550X | 1 | – | Feb 18, 2020 |
| OSCA-550X | 1 | – | Feb 18, 2020 |
| OSD | 1 | – | Apr 27, 2020 |
| PCManager | 1 | – | Apr 27, 2020 |
| Princeton-AL10B | 1 | – | Dec 7, 2020 |
| Princeton-AL10D | 1 | – | Dec 27, 2024 |
| PT9030-15 | 1 | – | Dec 28, 2024 |
| RSE6500 | 1 | – | Feb 17, 2020 |
| Taurus-AL00A | 1 | – | Dec 29, 2020 |
| Taurus-AL00B | 1 | – | Apr 20, 2020 |
| TC5200-16 | 1 | – | May 21, 2020 |
| TC7001-10 | 1 | – | Dec 28, 2024 |
| TE60 | 1 | – | Feb 17, 2020 |
| Tony-AL00B | 1 | – | Dec 7, 2020 |
| WS5200-11 | 1 | – | May 21, 2020 |
| WS5200-12 | 1 | – | May 21, 2020 |
| WS5200-16 | 1 | – | May 21, 2020 |
| WS5200-17 | 1 | – | May 21, 2020 |
| WS5800-10 | 1 | – | May 21, 2020 |
| WS6500-10 | 1 | – | May 21, 2020 |
| WS6500-16 | 1 | – | May 21, 2020 |
| WS7100-20 | 1 | – | Dec 28, 2022 |
| WS7200-10 | 1 | – | Dec 28, 2024 |
| WS7290-15 | 1 | – | Dec 28, 2024 |
| WS8000-10 | 1 | – | Dec 28, 2024 |
| WS8001-10 | 1 | – | Dec 28, 2024 |
| WS8002-10 | 1 | – | Dec 28, 2024 |
| WS8500-10 | 1 | – | Dec 28, 2024 |
| WS8502-10 | 1 | – | Dec 28, 2024 |
| WS8700-10 | 1 | – | Dec 28, 2024 |
| Yale-AL00A | 1 | – | Dec 27, 2024 |
| Yale-AL50A | 1 | – | Dec 27, 2024 |
| Yale-L61A | 1 | – | Dec 7, 2020 |
| Yale-TL00B | 1 | – | Dec 7, 2020 |
| AJMD-370S | 1 | – | Dec 6, 2023 |
| YutuFZ-5651S1 | 1 | – | Mar 26, 2025 |
| Anne-AL00 | 1 | – | May 21, 2020 |
| AR3200 | 1 | – | Apr 27, 2020 |
| B535-232a | 1 | – | Jun 16, 2023 |
| Berkeley-L09 | 1 | – | May 21, 2020 |
| CD16-10 | 1 | – | May 21, 2020 |
| CD17-10 | 1 | – | May 21, 2020 |
| CD17-16 | 1 | – | May 21, 2020 |
| CD18-10 | 1 | – | May 21, 2020 |
| CD18-16 | 1 | – | May 21, 2020 |
| CloudLink Board | 1 | – | Feb 17, 2020 |
| Columbia-TL00B | 1 | – | May 21, 2020 |
| DP300 | 1 | – | Feb 17, 2020 |
| EG8141A5 | 1 | – | Jun 6, 2025 |
| EG8145V5 | 1 | – | Jun 6, 2025 |
| EG8145V5-V2 | 1 | – | Jun 6, 2025 |
| EGRT-00 | 1 | – | May 28, 2024 |
| Ever-L29B | 1 | – | Feb 17, 2020 |
| FLMG-10 | 1 | – | Jun 16, 2023 |
| HarmonyOS AILife Solution 6.0 | 1 | – | Dec 28, 2024 |
| HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X | 1 | – | Feb 18, 2020 |
| HEGE-570 | 1 | – | Feb 18, 2020 |
| Hima-L29C | 1 | – | Dec 7, 2020 |
| Honor 10 | 1 | – | Jul 17, 2020 |
| Honor 10 Lite | 1 | – | May 21, 2020 |
| HONOR 20 PRO | 1 | – | Dec 7, 2020 |
| Honor 9X | 1 | – | May 29, 2020 |
| Honor V20 | 1 | – | Apr 20, 2020 |
| HOTA-Fara-B19 | 1 | – | Dec 28, 2022 |
| HUAWEI Mate 10 | 1 | – | May 29, 2020 |
| HUAWEI Mate 20 Pro (UD) | 1 | – | Dec 27, 2024 |
| HUAWEI Mate 20 RS | 1 | – | Feb 17, 2020 |
| HUAWEI Mate 30 | 1 | – | Dec 27, 2024 |
| HUAWEI nova 4e | 1 | – | May 21, 2020 |
| HUAWEI nova 5i | 1 | – | Dec 27, 2024 |
| HUAWEI P10 Plus | 1 | – | Feb 18, 2020 |
| HUAWEI P30 lite | 1 | – | May 21, 2020 |
| Huawei USG6000V | 1 | – | Mar 12, 2020 |
| iManager NetEco 6000 | 1 | – | Dec 29, 2020 |
| Jackman-AL00D | 1 | – | Dec 29, 2020 |
| Laya-AL00EP | 1 | – | Dec 7, 2020 |
| LelandP-L22A | 1 | – | May 21, 2020 |
| Marie-AL00AX | 1 | – | May 21, 2020 |
Exploited and recent CVEs
- CVE-2026-101184 Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
- CVE-2026-101184 Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
- CVE-2026-101178 Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
- CVE-2026-101178 Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
- CVE-2026-101177 Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
- CVE-2026-101177 Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
- CVE-2026-101174 DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
- CVE-2026-101173 DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
- CVE-2026-101176 Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
- CVE-2026-101176 Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
- CVE-2026-101186 DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
- CVE-2026-101185 OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
- CVE-2026-101183 UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
- CVE-2026-101182 Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
- CVE-2026-101181 Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
- CVE-2026-101180 DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
- CVE-2026-101179 Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
- CVE-2026-101175 Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability. 0.2%
- CVE-2026-101171 Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity. <0.1%
- CVE-2026-101170 DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
- CVE-2026-101172 Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality. <0.1%
- CVE-2026-65200 Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responses 0.1%
- CVE-2026-65199 Huawei openUBMC low-privilege SNMP to administrator privilege escalation 0.1%
- CVE-2026-65198 Huawei Default SNMPv3 USM key 0.2%
- CVE-2026-81645 Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability. <0.1%
- CVE-2026-49313 Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
- CVE-2026-49309 Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
- CVE-2026-49309 Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
- CVE-2026-41987 Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
- CVE-2026-41987 Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%