CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Huawei USG9520, USG9560, and USG9580 in version V300R001C01 are vulnerable to attacks that allow unauthenticated attackers to send abnormal DHCP request packets, potentially triggering a DoS condition.
Huawei Mate 8, Mate S, and P8 phones with specific software versions are vulnerable to attacks that can lead to system crashes or privilege escalation by individuals with graphic or camera access.
Huawei Mate 8, Mate S, and P8 phones with specific software versions are vulnerable to attacks that can lead to system crashes or privilege escalation by individuals with graphic or camera access.
Huawei Mate 8, Mate S, and P8 phones with specific software versions are vulnerable to attacks that can lead to system crashes or privilege escalation by individuals with graphic or camera access.
Huawei devices S5300, S5700, S6300, S6700, S7700, S9300, S9700, and S12700 with specified software versions are vulnerable to an attack that can lead to denial of service by sending malformed MPLS packets.
Huawei Honor 6, Honor 6 Plus, and Honor 7 phones with software versions earlier than 6.9.16 could allow attackers to disable the PXN defense mechanism by invoking related drive code to crash the system or escalate privilege.
The TrustZone driver in Huawei P9, P9 Lite, and P8 Lite has an improper resource release vulnerability, allowing attackers to cause a system restart or privilege elevation.
The video driver in Huawei P9 and Huawei Honor 6 phones before certain software versions has a stack overflow vulnerability, which can lead to system crashes or user privilege escalation.
The touchscreen driver in Huawei P9 and Honor 6 phones has a heap overflow vulnerability, which can lead to system crashes or user privilege escalation.
The video driver in Huawei P9 and Huawei Honor 6 phones before specific software versions has a stack overflow vulnerability, which can lead to system crashes or user privilege escalation.
Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may obtain the hardcoded keys and log in to such a device through SSH.
Huawei PC client software HiSuite 4.0.5.300_OVE has a DLL hijack vulnerability. An attacker can make the system load malicious DLL files to execute arbitrary code.
Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing. This allows an attacker to launch a MITM attack, potentially compromising the PC.
Huawei switches S5700, S6700, S7700, S9700, and S12700 with specified software have a permission control vulnerability. This allows AAA users to gain virtual type terminal (VTY) access permission, leading to privilege escalation.
Huawei LogCenter V100R001C10 could allow an authenticated attacker to tamper with requests using a tool and submit a request to the server for privilege escalation, affecting some system functions.
Huawei FusionAccess with software versions V100R005C10 and V100R005C20 may allow attackers to craft and send a malformed HDP protocol packet, resulting in the virtual cloud desktop displaying an error and becoming unusable.
The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configuration of iMana through privilege escalation.
The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user.
There is a vulnerability in Huawei Tecal devices that may lead to unauthorized access to the system. This affects multiple models, including RH1288 V2, RH2265 V2, RH2285 V2, and others with specific software versions.
There is a vulnerability in Huawei Tecal devices that may lead to unauthorized access to the system. This affects multiple server models, including RH1288 V2, RH2265 V2, RH2285 V2, and others with specific software versions.