CVE-2026-33042 | parse-community parse-server up to 8.6.48/9.6.0-alpha.28 User Creation improper authentication (GHSA-wjqw-r9x4-j59v)

March 19, 2026 Yanac

A vulnerability, which was classified as critical, has been found in parse-community parse-server up to 8.6.48/9.6.0-alpha.28. The impacted element is an unknown function of the component User Creation Handler. The manipulation leads to improper authentication.

This vulnerability is documented as CVE-2026-33042. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More