CVE-2026-27609 | parse-community parse-dashboard up to 9.0.0-alpha.7 /apps/ cross-site request forgery (GHSA-3534-xp88-25rc)

February 25, 2026 Yanac

A vulnerability classified as problematic has been found in parse-community parse-dashboard up to 9.0.0-alpha.7. Affected is an unknown function of the file /apps/. This manipulation causes cross-site request forgery.

This vulnerability is handled as CVE-2026-27609. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More