← Database

CVE-2026-4404

CRITICAL CVSS: 9.4 Published: 2026-03-23 Modified: 2026-08-10

Description

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.

Affected Platforms

Linuxfoundation Harbor

Weakness Type

CWE-798, CWE-1393

References