Lucene search
+L

5920 matches found

CVE
CVE
•added 2026/03/23 2:47 p.m.•71 views

CVE-2026-4404

GoHarbor Harbor version 2.15.0 and below is vulnerable to the use of hard-coded credentials . This flaw allows an attacker to gain unauthorized access to the web UI by using the application's default password. Exploitation of this vulnerability has been highlighted as a trending security concern ...

9.4CVSS7.6AI score0.00573EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/23 2:47 p.m.•10 views

CVE-2026-4404 Use of hard coded credentials in GoHarbor Harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

7.6AI score0.00573EPSS
SaveExploits0References4
Mend
Mend
•added 2026/03/23 2:47 p.m.•11 views

CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS7.6AI score0.00573EPSS
SaveExploits0References10
attackerkb
attackerkb
•added 2026/03/23 2:47 p.m.•14 views

CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS7.6AI score0.00573EPSS
SaveExploits0References5Affected Software1
osv_cve
osv_cve
•added 2026/03/23 2:47 p.m.•20 views

CVE-2026-4404 Use of hard coded credentials in GoHarbor Harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS6.9AI score
SaveExploits0References7
NVD
NVD
•added 2026/03/23 1:16 p.m.•17 views

CVE-2026-1958

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS0.00272EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/23 12:40 p.m.•10 views

CVE-2026-1958 Hard-coded passwords in KlinikaXP

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/23 12:40 p.m.•99 views

CVE-2026-1958

CVE-2026-1958 describes hard-coded credentials in KlinikaXP and KlinikaXP Insertino, enabling an unauthorized attacker to access internal services, notably the FTP server hosting update packages. The root cause is credentials embedded in the application, with exploitation potentially leading to u...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/23 12:40 p.m.•11 views

CVE-2026-1958

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/23 12:40 p.m.•51 views

CVE-2026-1958 Hard-coded passwords in KlinikaXP

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS0.00272EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•33 views

PT-2026-27121

Name of the Vulnerable Software and Affected Versions KlinikaXP versions prior to 5.39.01.01 KlinikaXP Insertino versions prior to 3.1.0.1 Description The use of hard-coded credentials in KlinikaXP and KlinikaXP Insertino allowed an unauthorized attacker access to internal services, including the...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•8 views

CVE-2026-1958: Use of Hard-coded Credentials

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•32 views

PT-2026-27137

Name of the Vulnerable Software and Affected Versions GoHarbor versions prior to 2.15.0 Description The use of hard-coded credentials in GoHarbor allows attackers to use the default password and gain access to the web user interface. Recommendations Update GoHarbor to version 2.15.0 or later...

9.4CVSS7.5AI score0.00573EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•10 views

CVE-2026-4404: Use of Hard-coded Credentials

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS7.6AI score0.00573EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/03/20 6:31 p.m.•22 views

EUVD-2026-13720

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/20 5:16 p.m.•19 views

CVE-2026-22900

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

9.8CVSS0.0032EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/20 4:21 p.m.•6 views

CVE-2026-22900

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/03/20 4:21 p.m.•35 views

CVE-2026-22900 QuNetSwitch

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

8.8CVSS0.0032EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/20 4:21 p.m.•9 views

CVE-2026-22900 QuNetSwitch

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/20 4:21 p.m.•42 views

CVE-2026-22900

CVE-2026-22900 affects QuNetSwitch. The vulnerability arises from hard-coded credentials in the product, enabling remote access by attackers if exploited. The documented impact is high: network access with confidentiality, integrity, and availability implications. Affected product/component is Qu...

9.8CVSS5.8AI score0.0032EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder