CVE-2026-116163 - Parse Server 9.0.0 before 9.10.5-alpha.2 Authentication Bypass via AuthAdapter Subclasses
CVE ID :CVE-2026-116163 Published : Oct. 25, 2026, 2:16 p.m. | 2 hours, 5 minutes ago Description :Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass because the validateSetUp, validateLogin, and validateUpdate methods of custom adapters subclassing...