CVE-2026-4404 — Use of hard coded credentials in GoHarbor Harbor
Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.
Published: 2026-03-23 · CVSS: 9.4 · CVSS 3.1
Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7