A vulnerability was found in GoHarbor Harbor up to 2.15.0. It has been declared as critical. Affected by this issue is some unknown functionality of the component Web UI. Executing a manipulation can lead to hard-coded credentials.
This vulnerability is registered as CVE-2026-4404. It is possible to launch the attack remotely. No exploit is available.
It is advisable to implement a patch to correct this issue.
