CVE-2026-90860 Blast Radius

HIGH • CVSS 7.1The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threa…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-90860.

Book a Demo →← Back to CVE-2026-90860