ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2026-4404

—
CVSS 3.1
9.4 critical
EPSS
<1%p41
Published
()
Modified
Description

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.

Vendors
linuxfoundation
Products
harbor
Weakness
CWE-798, CWE-1393
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news