Huawei HarmonyOS/EMUI Permission Control Vulnerability (CNVD-2026-37866)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei EMUI is an emotional operating system developed by Huawei based on Android. There is a permission control vulnerability in Huawei HarmonyOS/EMUI. This vulnerability stems...

CVE-2026-49309

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49309

CVE-2026-49309 is a permission control vulnerability in the Settings module of a Huawei consumer product, reported by Huawei's PSIRT. Successful exploitation may affect service confidentiality . The CVSS 3.1 score is 4.8 (MEDIUM) with a vector of AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N, indicating th...

EUVD-2026-74616

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49309

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-88807

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49309: Undefined Security Weakness

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-19904

A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=sitesettings of the component System Settings Module. The manipulation results in cross site scripting. The attack can be executed remotely. The...

EUVD-2026-59783

A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=sitesettings of the component System Settings Module. The manipulation results in cross site scripting. The attack can be executed remotely. The...

CVE-2026-19904

CVE-2026-19904 affects SourceCodester Online Book Store System 1.0 in the System Settings Module, via /admin/index.php?page=site_settings. The vulnerability enables cross-site scripting and can be exploited remotely, with a public exploit reported. Documents confirm the affected path and XSS impa...

CVE-2026-19904: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=sitesettings of the component System Settings Module. The manipulation results in cross site scripting. The attack can be executed remotely. The...

PT-2026-73044

Name of the Vulnerable Software and Affected Versions SourceCodester Online Book Store System version 1.0 Description Cross site scripting occurs in the System Settings Module within the file '/admin/index.php?page=site settings'. This issue allows a remote attacker to execute malicious scripts...

CVE-2026-58554

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-58554

CVE-2026-58554 is a permission control vulnerability in the Settings module. The root cause is permission control weaknesses that can lead to confidentiality impact. CVSS-3.1 measures: Local attack vector, Low attack complexity, No privileges required, User interaction required, Confidentiality i...

CVE-2026-58554

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-58554

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-44659

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-58554

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-60167

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-58554: Exposure of Sensitive Information to an Unauthorized Actor

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...