Skip to content
OpenAdvisories

Vendor

VPS.org

2 known vulnerabilities.

Products

Zulip template 1 Supabase template 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-16504

    VPS.org one-click Zulip template deployment instance contains multiple vulnerabilities

    Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password ("zulip"), and DISABLE_HTTPS=True.

    VPS.org Zulip template
  • Critical 9.1
    CVE-2026-16503

    VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities

    Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces (0.0.0.0:5432) with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a…

    VPS.org Supabase template