Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-16504

VPS.org one-click Zulip template deployment instance contains multiple vulnerabilities

Description

Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password ("zulip"), and DISABLE_HTTPS=True.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VPS.org Zulip template

  • N/Aaffected

References