CVE-2026-25850
Medium · 5.5CVSS
5.5
EPSS
0.1%
Published
May 19, 2026
CISA due date
—
The record
in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-61709 OpenFGA is an authorization and permission engine built for developers. CWE-281
- CVE-2026-58510 GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code… CWE-281
- CVE-2026-23556 When oxenstored is tearing a domain down, the node data is cleaned up but the usage… CWE-281
- CVE-2026-58494 Wasmtime is a runtime for WebAssembly. CWE-281
- CVE-2026-4360 In the Tarfile.extract() function, the filter parameter is not passed properly when… CWE-281
- CVE-2026-40767 Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions. CWE-281
- CVE-2024-47270 Improper preservation of permissions vulnerability in Archiving Push functionality in… CWE-281
- CVE-2026-44832 Snipe-IT is an IT asset/license management system. CWE-281