# CVE-2026-101176: CVE-2026-101176

Status: published. Published: 2026-11-02. Updated: 2026-11-02.

Permission control vulnerability in the event notification management module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.

## Remediation

No remediation reported in collected sources

## Affected products and versions

- Huawei / HarmonyOS: 4.3.3 (affected); 4.3.1 (affected); 4.3.0 (affected); 4.2.0 (affected); 4.0.0 (affected). Source: CNA: huawei
- Huawei / EMUI: 16.0.0 (affected); 15.0.0 (affected); 14.2.0 (affected); 14.0.0 (affected). Source: CNA: huawei

## Severity and prioritization

- CVSS 3.1: 7.1 (high); CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H; source: CNA: huawei

- CISA KEV: No listing in collected sources

- EPSS: Not available

- SSVC: Not available

- Weaknesses: CWE-264

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- https://consumer.huawei.com/en/support/bulletin/2026/10/ (CNA: huawei)

- https://consumer.huawei.com/en/support/bulletinvision/2026/10/ (CNA: huawei)

## Provenance

- CNA: huawei: https://www.cve.org/CVERecord?id=CVE-2026-101176; retrieved 2026-11-02; source updated 2026-11-02

Revision: fe933084bd6704cab9679ade2c1ea2c95dcc32a9029bda1a2e05604aa674e507

Canonical: https://y2.dev/cve/CVE-2026-101176