CRITICAL 9.8 NVD

CVE-2026-16504

Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password ("zulip"), and DISABLE_HTTPS=True.

Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password ("zulip"), and DISABLE_HTTPS=True.

References

Published: 2026-07-31 · Source: NVD · Feed updated: 2026-08-04
This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-07-31 via NVD.

Risk Timeline

CVE Disclosed2026-07-31 · 3 days ago

Remediation Resources

Official Advisory
kb.cert.org/vuls/id/243636
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.