PT-2026-41821 · Unknown · Openharmony

CVE-2026-28733 · Published 2026-05-19 · Updated 2026-05-19

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenHarmony versions 6.0 and earlier

Description An issue in the system allows a local attacker to achieve arbitrary code execution, which is the ability to run any command or software of the attacker's choice on the target machine.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-28733

Affected Products

Openharmony

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-28733 · Security Note
• https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2026/2026-05.md · Note
• https://twitter.com/CVEnew/status/2056670096920400282 · Twitter Post
• https://t.me/CVEtracker/54196 · Telegram Post