PT-2026-23428 · Apache · Apache System Service Framework

Published 2026-03-05 · Updated 2026-03-05 · CVE-2026-28542

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Apache System Service Framework (affected versions not specified)

Description A permission bypass issue exists within the system service framework. Successful exploitation of this issue may impact system availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2026-28542

Affected Products

Apache System Service Framework

References · 8

• https://consumer.huawei.com/en/support/bulletin/2026/3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28542 · Security Note
• https://osv.dev/vulnerability/CVE-2026-28542 · Vendor Advisory
• https://consumer.huawei.com/en/support/bulletinwearables/2026/3 · Vendor Advisory
• https://t.me/CVEtracker/46433 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2029502753953702277 · Twitter Post
• https://t.me/cveNotify/154288 · Telegram Post
• https://twitter.com/CVEnew/status/2029565220713312367 · Twitter Post