CVE-2026-116163 | parse-community parse-server up to 8.6.101/9.10.4 validateSetUp/validateLogin/validateUpdate authData improper authentication

October 25, 2026 Yanac

A vulnerability classified as critical was found in parse-community parse-server up to 8.6.101/9.10.4. This affects the function validateSetUp/validateLogin/validateUpdate. Such manipulation of the argument authData leads to improper authentication.

This vulnerability is referenced as CVE-2026-116163. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More