CVE-2026-16504

VPS.org one-click Zulip template deployment instance contains multiple vulnerabilities PUBLISHED

Description (CNA)

Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password ("zulip"), and DISABLE_HTTPS=True.

Affected (CNA)

Vendor / product	Versions
VPS.org / Zulip template	affected N/A

CWE

No CWE identifiers supplied.

References

https://kb.cert.org/vuls/id/243636

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.