Vulnerability Bulletins |
CVE-2026-92770 |
|
| Affected software | HARBOR |
| Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-92770 | |