First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-49301

MediumCVSS 6.2/10Last modified Aug 26, 2026

Description

Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	4.3.1; 4.3.0; 4.2.0; 4.0.0
Huawei	EMUI	15.0.0; 14.2.0; 14.0.0

References

Timeline

Published: Aug 17, 2026
Last modified: Aug 26, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-493026.2Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect servic CVE-2026-493035.1Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-493046.2Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect avail CVE-2026-493056.2Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availabil CVE-2026-493063.3UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-493076.2Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service co CVE-2026-493085.5Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confident CVE-2026-493094.8Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidenti CVE-2026-49318.6Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt position for a negligible asset cost.CVE-2026-493108.6Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service CVE-2026-493116.2Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availabil CVE-2026-493124.0Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidential