Vulnerabilities
Summary — last 7 days
New vulnerabilities2,767▼ 5 vs. last week
Critical / high1,280▼ 248 vs. last week
New active exploitation (KEV)6▼ 1 vs. last week
Unscored (no CVSS)240▲ 207 vs. last week
1,254 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (5.5) | 0.47% | — | Cleo HarmonyAI | 9/1/2026 | 9/1/2026 | A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the component JWT Refresh Token Handler. Performing a manipulation of the argument Bearer results in improper privilege management. The attack is possible to be carried out remotely.… | |
| Deferred | Low (2.1) | 0.46% | — | Cleo HarmonyAI | 9/1/2026 | 9/1/2026 | A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be executed remotely. The exploit has been disclosed to the… | |
| Deferred | Low (3.3) | 0.10% | — | OpenharmonyAI | 5/19/2026 | 7/24/2026 | in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. | |
| Deferred | Low (3.3) | 0.13% | — | OpenharmonyAI | 5/19/2026 | 7/24/2026 | in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. | |
| Deferred | Medium (6.5) | 0.15% | — | OpenharmonyAI | 5/19/2026 | 7/24/2026 | in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution. | |
| Deferred | Low (3.3) | 0.13% | — | OpenharmonyAI | 5/19/2026 | 7/24/2026 | in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. | |
| Deferred | Medium (5.5) | 0.11% | — | OpenharmonyAI | 5/19/2026 | 7/24/2026 | in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak. | |
| Deferred | High (8.8) | 0.73% | — | OpenharmonyAI | 5/19/2026 | 7/24/2026 | in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps. | |
| Deferred | Medium (5.5) | 0.13% | — | OpenharmonyAI | 5/19/2026 | 7/24/2026 | in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak | |
| Deferred | High (8.4) | 0.15% | — | OpenharmonyAI | 5/19/2026 | 7/24/2026 | in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered. | |
| Deferred | Low (3.3) | 0.12% | — | OpenharmonyAI | 5/19/2026 | 7/24/2026 | in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. | |
| Deferred | High (8.1) | 0.43% | — | OpenharmonyAI | 5/19/2026 | 7/24/2026 | in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps. | |
| Analyzed | Medium (5.1) | 0.11% | — | Huawei Harmonyos | 4/13/2026 | 6/17/2026 | Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | |
| Analyzed | Critical (10) | 0.36% | — | Huawei Harmonyos | 4/13/2026 | 6/17/2026 | Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | |
| Analyzed | Medium (5.5) | 0.10% | — | Huawei Harmonyos | 4/13/2026 | 6/17/2026 | Boundary-unlimited vulnerability in the application read module. Impact: Successful exploitation of this vulnerability may affect availability. | |
| Analyzed | Medium (5.5) | 0.11% | — | Huawei Harmonyos | 4/13/2026 | 6/17/2026 | Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability. | |
| Analyzed | Medium (4.7) | 0.09% | — | Huawei Harmonyos | 4/13/2026 | 6/17/2026 | Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect availability. | |
| Analyzed | Medium (4.7) | 0.09% | — | Huawei Harmonyos | 4/13/2026 | 6/17/2026 | Race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability. | |
| Analyzed | High (7.1) | 0.11% | — | Huawei HarmonyosHuawei Emui | 4/13/2026 | 6/17/2026 | UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | |
| Analyzed | Medium (4.1) | 0.09% | — | Huawei Harmonyos | 4/13/2026 | 6/17/2026 | UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. | |
| Analyzed | Medium (5.5) | 0.09% | — | Huawei Harmonyos | 4/13/2026 | 6/17/2026 | UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. | |
| Analyzed | Medium (5.7) | 0.10% | — | Huawei HarmonyosHuawei Emui | 4/13/2026 | 6/17/2026 | Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | |
| Analyzed | High (7.1) | 0.10% | — | Huawei HarmonyosHuawei Emui | 4/13/2026 | 6/17/2026 | UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | |
| Analyzed | Medium (4.7) | 0.07% | — | Huawei Harmonyos | 4/13/2026 | 6/17/2026 | UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability. | |
| Analyzed | Medium (5.6) | 0.10% | — | Huawei Harmonyos | 4/13/2026 | 6/17/2026 | Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability. |