CVE-2026-16503

CVE-2026-16503 concerns VPS.org’s one-click Supabase template, which deploys PostgreSQL bound to all interfaces (0.0.0.0:5432) with the default password postgres . This exposure can bypass host firewall rules (Docker iptables), enabling potential remote database access. The linked sources indicat...