CVE-2026-16504

The CVE-2026-16504 entry concerns VPS.org’s one-click Zulip template. It vulnerable component: the Zulip deployment template ships with a hardcoded application signing key (secret_key: changeme), a default database password (zulip), and DISABLE_HTTPS=True. Reported impact: authentication bypass a...