Executive brief
Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor
Affected products
- Go github.com/goharbor/harbor
Junglewise Threat Intelligence
CVE-2026-4404: GO-2026-4845 - Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor
CVE-2026-4404 · Severity: low · CVSS 3.1 · Published 2026-03-26
Technologies: github.com/goharbor/harbor (Go). Vendors: Go.
Related threats
- GO-2026-4876 - Harbor: LDAP password and OIDC secret are not redacted in the audit log in github.com/goharbor/harbor
- GO-2025-3826 - Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor
- GO-2024-3268 - Harbor fails to validate the user permissions when updating p2p preheat policies in github.com/goharbor/harbor
- GO-2022-0876 - Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor
- GO-2022-0863 - Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor