CVE-2026-16503

The CVE describes a vulnerability in the VPS.org one-click Supabase template that deploys PostgreSQL and exposes it on all interfaces (0.0.0.0:5432) with the default password “postgres”. The root cause is misconfiguration in the deployment template combined with Docker iptables rules that bypass ...