CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-02
Parse Server Information Disclosure via Object Update Response (CVE-2026-120310)
[Affected Scope] Parse Server versions before 8.6.109 and 9.0.0 versions before 9.10.6-alpha.1
[Impact] Attackers with update-only permissions (but no read access) can view sensitive object data, atomic operation results, and parent fields via update response payloads
[Mitigation] Immediately upgrade Parse Server to version 8.6.109, 9.10.6-alpha.1, or higher