Security Advisory

CVE-2026-16504

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-31 15:19:42
Last updated 2026-07-31 15:19:42
Assigner certcc
CVSS score not scored
State PUBLISHED

Description

Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password ("zulip"), and DISABLE_HTTPS=True.