VPS.org Zulip template vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting VPS.org Zulip template: 1 record(s), with affected versions and fixes.

CVE-2026-16504 Critical · 9.8 CWE-321 Jul 31, 2026

VPS.org one-click Zulip template deployment instance contains multiple vulnerabilities

Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password ("zulip"), and DISABLE_HTTPS=True.