Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.12 and 8.6.25, the _GraphQLConfig and _Audience internal classes can be read, modified, and deleted via the generic /classes/_GraphQLConfig and /classes/_Audience REST API routes without master key authentication. This bypasses the master key enforcement that exists on the dedicated /graphql-config and /push_audiences endpoints. An attacker can read, modify and delete GraphQL configuration and push audience data. This vulnerability is fixed in 9.5.2-alpha.12 and 8.6.25.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-10 | 1 | Disclosure1 |
| 2026-03-17 | 1 | General1 |
Top signals this week: • unknown: CVE-2026-31800: CRITICAL severity (unknown) • Mistral: Mistral v2.0.3: breaking change detected • AWS: AWS v3.1009.0: deprecation notice • Stripe: Stripe v2203: version bump
Post summary
The post lists CVE-2026-31800 with a severity tag but provides no additional context, evidence of exploitation, or mitigation steps.
CVE-2026-31800 Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.12 and 8.6.25, the _GraphQLConfig and _Au… https://www.cve.org/CVERecord?id=CVE-2026-31800
Post summary
The passage announces CVE-2026-31800 for Parse Server, noting affected components and versions, but offers no proof of exploitation or remediation details.
12 of 12 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | parseplatform | parse-server | - | node.js | - |
| App | parseplatform | parse-server | 9.5.2 | node.js | - |
| App | parseplatform | parse-server | 9.5.2 | node.js | - |
| App | parseplatform | parse-server | 9.5.2 | node.js | - |
| App | parseplatform | parse-server | 9.5.2 | node.js | - |
| App | parseplatform | parse-server | 9.5.2 | node.js | - |
| App | parseplatform | parse-server | 9.5.2 | node.js | - |
| App | parseplatform | parse-server | 9.5.2 | node.js | - |
| App | parseplatform | parse-server | 9.5.2 | node.js | - |
| App | parseplatform | parse-server | 9.5.2 | node.js | - |
| App | parseplatform | parse-server | 9.5.2 | node.js | - |
| App | parseplatform | parse-server | 9.5.2 | node.js | - |