Vulnerabilidades de VPS.org
CVEs publicadas que afetam produtos de VPS.org: 2 registro(s), com severidade, exploração e correções.
CVE-2026-16504
Crítica · 9.8
CWE-321 31/07/2026
VPS.org one-click Zulip template deployment instance contains multiple vulnerabilities
Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password ("zulip"), and DISABLE_HTTPS=True.
CVE-2026-16503
Crítica · 9.1
CWE-1188 31/07/2026
VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities
Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces (0.0.0.0:5432) with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration.