Skip to content
Threat Feed
Subscribe

Product

Parse Server (<= 8.6.87, >= 9.0.0 < 9.10.1-Alpha.7)

1 brief RSS
high advisory

Authentication Bypass in Parse Server LDAP Adapter (CVE-2026-87806)

Parse Server versions before 8.6.88 and 9.10.1-alpha.7 contain an authentication bypass vulnerability in the LDAP adapter that allows attackers to perform account takeover via zero-length credentials.

Parse Server authentication-bypass cve-2026-87806 account-takeover
1c