First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-28540

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-158 CWE-125

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	6.0.0; 5.1.0

References

https://consumer.huawei.com/en/support/bulletin/2026/3/Vendor Advisory
https://consumer.huawei.com/en/support/bulletinlaptops/2026/3/Vendor Advisory
https://consumer.huawei.com/en/support/bulletinvision/2026/3/Vendor Advisory
https://consumer.huawei.com/en/support/bulletinwearables/2026/3/Vendor Advisory

Timeline

Published: Mar 5, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-285415.5Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-285425.5Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availabili CVE-2026-285434.7Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect ava CVE-2026-285444.7Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-285454.7Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-285465.5Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-285475.5Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect avail CVE-2026-285485.5Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service co CVE-2026-285494.7Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availabi CVE-2026-28558.8A vulnerability has been found in D-Link DWR-M960 1.01.07. Affected is the function sub_4648F0 of the file /boafrm/formDdns of the component CVE-2026-285504.7Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-285514.7Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect avai