VulnSocial

CVE-2026-27610General(parseplatform / parse_dashboard)

LOWCVSS 5.3 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the `ConfigKeyCache` uses the same cache key for both master key and read-only master key when resolving function-typed keys. Under specific timing conditions, a read-only user can receive the cached full master key, or a regular user can receive the cached read-only master key. The fix in version 9.0.0-alpha.8 uses distinct cache keys for master key and read-only master key. As a workaround, avoid using function-typed master keys, or remove the `agent` configuration block from your dashboard configuration.

parseplatform CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-1289

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • parse_dashboard

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
parseplatform
Products
parse_dashboard

13 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-02-25: 3Technical Details · 2026-02-25: 202-25
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets4 URLs
Full discourse3 posts
  • cvereports@_cvereports
    Disclosure

    CVE-2026-27610: Key Swap: How Parse Dashboard Handed Admin Keys to Guests via Cache Collision A critical race condition and cache collision vulnerability exists in Parse Dashboard versions 7.3.0-alpha.42 through 9.0.0-alpha.7. The flaw lies within the... https://cvereports.com/reports/CVE-2026-27610

    Post summary

    The post discloses a race condition and cache collision vulnerability in Parse Dashboard affecting versions 7.3.0‑alpha.42 through 9.0.0‑alpha.7, but does not provide PoC, exploit, or patch details.

    0000039
    32 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-27610 Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the `ConfigKeyCache` uses the same cache k… https://www.cve.org/CVERecord?id=CVE-2026-27610

    Post summary

    The text references CVE-2026-27610 but offers no actionable details, PoC, exploit, patch, or evidence of exploitation.

    00000112
    56.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-27610 Parse Dashboard Master Key Exposure Vulnerability in Versions 7.3... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27610 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The post announces CVE-2026-27610, a master key exposure issue in Parse Dashboard 7.3, and provides links to a vulnerability details page and alert subscription, but offers no further technical or exploit information.

    0000037
    4.0K followersView on X
CPE platform detail135 entries

135 of 135 entries

PartVendorProductVersionTarget SWTarget HW
Appparseplatformparse_dashboard7.3.0node.js-
Appparseplatformparse_dashboard7.3.0node.js-
Appparseplatformparse_dashboard7.3.0node.js-
Appparseplatformparse_dashboard7.3.0node.js-
Appparseplatformparse_dashboard7.3.0node.js-
Appparseplatformparse_dashboard7.3.0node.js-
Appparseplatformparse_dashboard7.3.0node.js-
Appparseplatformparse_dashboard7.3.0node.js-
Appparseplatformparse_dashboard7.4.0node.js-
Appparseplatformparse_dashboard7.4.0node.js-
Appparseplatformparse_dashboard7.4.0node.js-
Appparseplatformparse_dashboard7.4.0node.js-
Appparseplatformparse_dashboard7.4.0node.js-
Appparseplatformparse_dashboard7.5.0node.js-
Appparseplatformparse_dashboard7.5.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard7.6.0node.js-
Appparseplatformparse_dashboard8.0.0node.js-
Appparseplatformparse_dashboard8.0.0node.js-
Appparseplatformparse_dashboard8.0.0node.js-
Appparseplatformparse_dashboard8.0.0node.js-
Appparseplatformparse_dashboard8.0.0node.js-
Appparseplatformparse_dashboard8.0.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.0node.js-
Appparseplatformparse_dashboard8.1.1node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.2.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.3.0node.js-
Appparseplatformparse_dashboard8.4.0node.js-
Appparseplatformparse_dashboard8.4.1node.js-
Appparseplatformparse_dashboard8.4.1node.js-
Appparseplatformparse_dashboard8.5.0node.js-
Appparseplatformparse_dashboard8.5.0node.js-
Appparseplatformparse_dashboard8.5.0node.js-
Appparseplatformparse_dashboard8.5.0node.js-
Appparseplatformparse_dashboard8.5.0node.js-
Appparseplatformparse_dashboard8.5.0node.js-
Appparseplatformparse_dashboard8.5.0node.js-
Appparseplatformparse_dashboard9.0.0node.js-
Appparseplatformparse_dashboard9.0.0node.js-
Appparseplatformparse_dashboard9.0.0node.js-
Appparseplatformparse_dashboard9.0.0node.js-
Appparseplatformparse_dashboard9.0.0node.js-
Appparseplatformparse_dashboard9.0.0node.js-
Appparseplatformparse_dashboard9.0.0node.js-

Explore more

Back to dashboardparseplatform CVEsparse_dashboard vulnerabilities