VU#243636: VPS.org one-click deployment templates contain multiple vulnerabilities

CERT/CC advisories published July 23–31, 2026 describe multiple vulnerabilities across VPS deployment templates, SGLang, foreUP, Develar app-builder, OPeNDAP Hyrax, Arris BGW210-700 gateways, and Logto. Issues include unauthenticated remote code execution, SSRF, credential and secret disclosure, default-password exposure, authentication and authorization bypasses, insecure file extraction, account takeover, arbitrary file overwrite, and sensitive data exposure. Several vulnerabilities are remotely exploitable with little or no authentication, and SGLang reportedly had no available patches at].