CVE-2026-28733

MediumCVSS 6.5

Published: 19/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

In OpenHarmony v6.0 and prior versions, a vulnerability allows a local attacker to execute arbitrary code.

A local attacker can gain full control over the device running OpenHarmony by executing arbitrary code in kernel or application context.

Update OpenHarmony to a version later than 6.0 that includes a fix for this vulnerability.

Original NVD description (English source)

in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution.