CVE-2020-1786

HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerability. The software does not sufficiently validate the name of apk file in a special condition which could allow an attacker to forge a crafted application as a normal one. Successful exploit could allow the attacker to bypass digital balance function.

• CWE-287

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-smartphone-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-smartphone-enVendor Advisory

Published

Jan 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17759An issue was found in the Evernote client for Windows 10, 7,…8.8
• CVE-2020-1776When an agent user is renamed or set to invalid the session …4.3
• CVE-2020-1777Agent names that participates in a chat conversation are rev…5.3
• CVE-2020-1778When OTRS uses multiple backends for user authentication (wi…4.3
• CVE-2020-1779When dynamic templates are used (OTRSTicketForms), admin can…4.9
• CVE-2020-1785Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a den…5.5
• CVE-2020-1787HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C…6.6
• CVE-2020-1788Honor V30 smartphones with versions earlier than 10.0.1.135(…5.5
• CVE-2020-1789Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X produc…6.8
• CVE-2020-17891TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 …6.1
• CVE-2020-1790GaussDB 200 with version of 6.5.1 have a command injection v…8.8
• CVE-2020-17901Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows a…6.5