CVE-2026-92770

Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts...

EUVD-2026-81034

Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts...

CVE-2026-92770 Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter

Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts...

CVE-2026-92770

Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts...

CVE-2026-92770

Harbor through 2.15.2 is affected by a scanner credential disclosure vulnerability. The root cause is an improper restriction on the q query parameter used for filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column t...

CVE-2026-92770: Exposure of Sensitive Information to an Unauthorized Actor

Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts...

PT-2026-94048

Name of the Vulnerable Software and Affected Versions Harbor versions prior to 2.15.3 Description Project administrators can recover the scanner adapter secret one character at a time by exploiting fuzzy filtering on the AccessCredential column. This is possible because the software fails to...