Vulnerability Bulletins |
CVE-2026-16503 |
|
| Affected software | POSTGRESQL |
| Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces (0.0.0.0:5432) with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-16503 | |