Lucene search
+L

3909 matches found

Github Security Blog
Github Security Blog
added 2026/03/23 3:30 p.m.10 views

Harbor allows the use of the default password for web UI login

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS5.8AI score0.0049EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/03/23 3:30 p.m.6 views

GHSA-HJ7X-HMF2-HC2P Harbor allows the use of the default password for web UI login

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS5.8AI score0.0049EPSS
SaveExploits0References6
NVD
NVD
added 2026/03/23 3:16 p.m.12 views

CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS0.0049EPSS
SaveExploits0References5
CVE
CVE
added 2026/03/23 2:47 p.m.35 views

CVE-2026-4404

CVE-2026-4404 affects Harbor

9.4CVSS5.8AI score0.0049EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/23 2:47 p.m.7 views

CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS5.8AI score0.0049EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/23 2:47 p.m.2 views

CVE-2026-4404 Use of hard coded credentials in GoHarbor Harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

5.8AI score0.0049EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/23 2:47 p.m.6 views

CVE-2026-4404 Use of hard coded credentials in GoHarbor Harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS6.9AI score
SaveExploits0References7
NVD
NVD
added 2026/03/23 1:16 p.m.7 views

CVE-2026-1958

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS0.00272EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/23 12:40 p.m.38 views

CVE-2026-1958 Hard-coded passwords in KlinikaXP

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS0.00272EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/23 12:40 p.m.7 views

CVE-2026-1958 Hard-coded passwords in KlinikaXP

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/23 12:40 p.m.4 views

CVE-2026-1958

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/23 12:40 p.m.27 views

CVE-2026-1958

CVE-2026-1958 describes hard-coded credentials in KlinikaXP and KlinikaXP Insertino, enabling an unauthorized attacker to access internal services, notably the FTP server hosting update packages. The root cause is credentials embedded in the application, with exploitation potentially leading to u...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.22 views

PT-2026-27137

Name of the Vulnerable Software and Affected Versions GoHarbor versions prior to 2.15.0 Description The use of hard-coded credentials in GoHarbor allows attackers to use the default password and gain access to the web user interface. Recommendations Update GoHarbor to version 2.15.0 or later...

9.4CVSS5.8AI score0.0049EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.11 views

PT-2026-27121

Name of the Vulnerable Software and Affected Versions KlinikaXP versions prior to 5.39.01.01 KlinikaXP Insertino versions prior to 3.1.0.1 Description The use of hard-coded credentials in KlinikaXP and KlinikaXP Insertino allowed an unauthorized attacker access to internal services, including the...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/03/20 6:31 p.m.11 views

EUVD-2026-13720

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/20 5:16 p.m.12 views

CVE-2026-22900

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

9.8CVSS0.0032EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/20 4:21 p.m.3 views

CVE-2026-22900

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/03/20 4:21 p.m.24 views

CVE-2026-22900

CVE-2026-22900 affects QuNetSwitch. The vulnerability arises from hard-coded credentials in the product, enabling remote access by attackers if exploited. The documented impact is high: network access with confidentiality, integrity, and availability implications. Affected product/component is Qu...

9.8CVSS5.8AI score0.0032EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/20 4:21 p.m.5 views

CVE-2026-22900 QuNetSwitch

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/20 4:21 p.m.26 views

CVE-2026-22900 QuNetSwitch

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

8.8CVSS0.0032EPSS
SaveExploits0References1
Rows per page
Query Builder