CVE-2026-4404

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

March 25, 2026

Last Seen

March 25, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Hardcoded Credentials Flaw in GoHarbor's Harbor Exposes Registries to Attacks72.8

GoHarbor's Harbor container registry has a critical vulnerability, CVE-2026-4404, due to hardcoded default credentials that can be exploited by attackers. The default admin password, 'Harbor12345', does not require change upon initial deployment, allowing unauthorized access if left unchanged. This...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Hardcoded Credentials Flaw in GoHarbor's Harbor Exposes Registries to Attacks

Mar 25·2 sources

Related Entities

Supply Chain Attack T1195 - Supply Chain Compromise Harbor Container Registry

CVE-2026-4404

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical Hardcoded Credentials Flaw in GoHarbor's Harbor Exposes Registries to Attacks

Related Articles (1)

GoHarbor Issues Urgent Patch for Harbor Flaw Allowing Full Registry Compromise

Related Entities