Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.19 and 8.6.43, a remote attacker can crash the Parse Server by subscribing to a LiveQuery with an invalid regular expression pattern. The server process terminates when the invalid pattern reaches the regex engine during subscription matching, causing denial of service for all connected clients. The fix in 9.6.0-alpha.19 and 8.6.43 validates regular expression patterns at subscription time, rejecting invalid patterns before they are stored. Additionally, a defense-in-depth try-catch prevents any subscription matching error from crashing the server process. As a workaround, disable LiveQuery if it is not needed.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-18 | 1 | Disclosure1 |
| 2026-03-19 | 2 | Disclosure1General1 |
CVE Alert: CVE-2026-32770 - parse-community - parse-server - https://www.redpacketsecurity.com/cve-alert-cve-2026-32770-parse-community-parse-server/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-32770 #parse-community #parse-server
Post summary
The tweet merely announces the existence of CVE-2026-32770 with a link to an alert, providing no additional technical or exploit information.
CVE-2026-32770 Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.19 and 8.6.43, a remote attacker can cras… https://www.cve.org/CVERecord?id=CVE-2026-32770
Post summary
The post announces CVE‑2026‑32770, noting that Parse Server versions prior to 9.6.0‑alpha.19 and 8.6.43 allow a remote attacker to crash the application.
CVE-2026-32770 Parse Server LiveQuery Denial of Service via Invalid Regular Expression Pattern https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32770
Post summary
The text announces a DoS vulnerability in Parse Server LiveQuery triggered by an invalid regex pattern, but offers no proof of exploitation, PoC, patch, or de‑facto confirmation.
19 of 19 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | parseplatform | parse-server | - | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |
| App | parseplatform | parse-server | 9.6.0 | node.js | - |