Login Request a demo
HA
Product
harbor
by harbor · last CVE Oct 26, 2026
5
CVEs
0
On KEV
9.4
Max CVSS
1
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 0Medium 3Low 0
Severity
All severities5Critical1High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add harbor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4404
9.4
0%
Mar 23
Use of hard coded credentials in GoHarbor Harbor
Affected: 0.1.0 through 2.15.0
CVE-2024-22244
6.1
0%
Jun 10
Harbor Open Redirect URL
Affected: 2.8 through 2.8.4; 2.10 through 2.10.0
CVE-2024-22261
5.5
0%
Jun 10
SQL Injection in Harbor scan log API
Affected: 2.8.1 through 2.8.5; 2.9.0 through 2.9.3; 2.10.0 through 2.10.1
CVE-2024-22278
4.3
0%
Aug 2
Harbor fails to validate the user permissions when updating project configurations
Affected: 2.9.4 before <v2.9.5; 2.10.2 before <v2.10.3
CVE-2026-111590
New
–
0%
Oct 26
SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal services
Affected: 2.15.0 before 2.15.3; 2.14.0 before 2.14.5; 1.7.0 before 2.13.6
Showing 5