CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.

Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.

Uso de credenciales codificadas de forma rígida en GoHarbor Harbor versión 2.15.0 y anteriores, permite a los atacantes usar la contraseña predeterminada y obtener acceso a la interfaz de usuario web.