Lucene search
+L

5863 matches found

EUVD
EUVD
•added 2026/03/23 3:30 p.m.•15 views

EUVD-2026-14411

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References3
OSV
OSV
•added 2026/03/23 3:30 p.m.•10 views

GHSA-HJ7X-HMF2-HC2P Harbor allows the use of the default password for web UI login

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS5.8AI score0.00573EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/03/23 3:30 p.m.•19 views

Harbor allows the use of the default password for web UI login

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS7.6AI score0.00573EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2026/03/23 3:16 p.m.•24 views

CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS0.00573EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/03/23 2:47 p.m.•5 views

CVE-2026-4404 Use of hard coded credentials in GoHarbor Harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

7.6AI score0.00573EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/23 2:47 p.m.•68 views

CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS7.6AI score0.00573EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/03/23 2:47 p.m.•13 views

CVE-2026-4404 Use of hard coded credentials in GoHarbor Harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS6.9AI score
SaveExploits0References7
attackerkb
attackerkb
•added 2026/03/23 2:47 p.m.•11 views

CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS5.8AI score0.00573EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2026/03/23 1:16 p.m.•13 views

CVE-2026-1958

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS0.00272EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/23 12:40 p.m.•45 views

CVE-2026-1958 Hard-coded passwords in KlinikaXP

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS0.00272EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/23 12:40 p.m.•93 views

CVE-2026-1958

CVE-2026-1958 describes hard-coded credentials in KlinikaXP and KlinikaXP Insertino, enabling an unauthorized attacker to access internal services, notably the FTP server hosting update packages. The root cause is credentials embedded in the application, with exploitation potentially leading to u...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/23 12:40 p.m.•6 views

CVE-2026-1958

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/23 12:40 p.m.•10 views

CVE-2026-1958 Hard-coded passwords in KlinikaXP

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•26 views

PT-2026-27121

Name of the Vulnerable Software and Affected Versions KlinikaXP versions prior to 5.39.01.01 KlinikaXP Insertino versions prior to 3.1.0.1 Description The use of hard-coded credentials in KlinikaXP and KlinikaXP Insertino allowed an unauthorized attacker access to internal services, including the...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•28 views

PT-2026-27137

Name of the Vulnerable Software and Affected Versions GoHarbor versions prior to 2.15.0 Description The use of hard-coded credentials in GoHarbor allows attackers to use the default password and gain access to the web user interface. Recommendations Update GoHarbor to version 2.15.0 or later...

9.4CVSS5.8AI score0.00573EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•6 views

CVE-2026-4404: Use of Hard-coded Credentials

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS6.1AI score0.00573EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•4 views

CVE-2026-1958: Use of Hard-coded Credentials

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/20 6:31 p.m.•19 views

EUVD-2026-13720

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/20 5:16 p.m.•16 views

CVE-2026-22900

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

9.8CVSS0.0032EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/20 4:21 p.m.•33 views

CVE-2026-22900 QuNetSwitch

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

8.8CVSS0.0032EPSS
SaveExploits0References1
Rows per page
Query Builder