CVE-2026-16504: Deployment of the VPS.org one-click Zulip template deploys
Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password ("zulip"), and DISABLE_HTTPS=True.
- EPSS 0.5% (39.9% percentile)
- CVSS 9.8 critical