CVE-2026-34532 | parse-community parse-server up to 8.6.66/9.7.0-alpha.10 Cloud Function authorization (GHSA-vpj2-qq7w-5qq6 / EUVD-2026-17473)

March 31, 2026 Yanac

A vulnerability categorized as critical has been discovered in parse-community parse-server up to 8.6.66/9.7.0-alpha.10. This impacts an unknown function of the component Cloud Function Handler. Executing a manipulation can lead to incorrect authorization.

This vulnerability appears as CVE-2026-34532. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More