CVE-2026-4404: Harbor allows the use of the default password for web UI login

Severity: Critical

CVSS Score: 9.4

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.