References https://unit42.paloaltonetworks.com/critical-vulnerability-in-harbor-enables-privilege-escalation-from-zero-to-admin-cve-2019-16097/ https://nvd.nist.gov/vuln/detail/CVE-2019-16097 https://github.com/goharbor/harbor/security/advisories/GHSA-fqvr-xx6w-m6m7 https://www.cve.org/CVERecord?id=CVE-2019-16097 https://nsfocusglobal.com/harbor-remote-privilege-escalation-vulnerability-cve-2019-16097-threat-alert/ https://beaglesecurity.com/blog/vulnerability/harbor-enables-privilege-escalation-from-zero-to-admin.html https://github.com/emadshanab/goby-poc/blob/main/Harbor-Remote-Privilege-Escalation-Vulnerability-(CVE-2019-16097).json https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=32906 https://vulners.com/cve/CVE-2019-16097 https://www.reddit.com/r/netsec/comments/d6d4sj/critical_vulnerability_in_harbor_enables/
Related VulnerabilitiesPoCCVE-2026-2113: tpadmin <= 1.3.12 - Remote Code ExecutionPoCnacos-v3-auth-scope-bypass: Nacos 3.x - Unauthenticated Admin TakeoverPoCCVE-2026-7467: Read More & Accordion <= 3.5.7 - Authenticated Privilege EscalationPoCCVE-2025-14998: Branda WordPress plugin - Privilege EscalationPoCCVE-2025-15403: RegistrationMagic <= 6.0.7.1 - Privilege EscalationPoCCVE-2026-11387: SMS Alert – SMS & OTP for WooCommerce - Privilege EscalationPoCCVE-2026-19598: Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX RouterPoCCVE-2026-12394: WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege EscalationPoCCVE-2026-17594: Sonatype Nexus Repository < 3.95.0 - Privilege Escalation via Repository Format MismatchPoCCVE-2026-55224: MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCEPoCCVE-2024-57726: SimpleHelp <= 5.5.7 - Privilege EscalationPoCCVE-2025-13342: DynamiApps Frontend Admin <= 3.28.20 - Unauthenticated Arbitrary Options UpdatePoCCVE-2026-27542: WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation