Skip to content
NewA calmer, faster ZeroHour
Vulnerability3

CVE-2026-4404

CVSS 3.1
9.4 critical
EPSS
<1%p41
Published
·
Modified
Analyze CVE-2026-4404 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.

Vendors
linuxfoundation
Products
harbor
Weakness
CWE-798, CWE-1393
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

1 story