PT-2026-27137 · Goharbor · Goharbor

CVE-2026-4404

Publicado

2026-03-23

Atualizado

2026-08-17

CVSS v3.1

9.4

Crítica

Vetor

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions GoHarbor versions prior to 2.15.0

Description The use of hard-coded credentials in GoHarbor allows attackers to use the default password and gain access to the web user interface.

Recommendations Update GoHarbor to version 2.15.0 or later.

Exploit

Correção

Using Hardcoded Credentials

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

BIT-HARBOR-2026-4404

CVE-2026-4404

GHSA-HJ7X-HMF2-HC2P

GO-2026-4845

OPENSUSE-SU-2026:21483-1

SUSE-SU-2026:1135-1

Goharbor