Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:parseplatform:parse_server:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Parse Server: Authentication bypass vulnerability (CVE-2026-116163)

Parse Server versions prior to 8.6.102 and 9.0.0-9.10.5-alpha.2 contain an authentication bypass vulnerability allowing unauthenticated actors to sign up, link identities, or log in as existing users by providing arbitrary authData.

Parse Server authentication-bypass web-application cve-2026-116163
1t 1c
high advisory

Authentication Bypass in Parse Server LDAP Adapter (CVE-2026-87806)

Parse Server versions before 8.6.88 and 9.10.1-alpha.7 contain an authentication bypass vulnerability in the LDAP adapter that allows attackers to perform account takeover via zero-length credentials.

Parse Server authentication-bypass cve-2026-87806 account-takeover
1c