CVE-2026-34784 | parse-community parse-server up to 8.6.70/9.7.0 HTTP Range Request improper authorization (GHSA-hpm8-9qx6-jvwv)

A vulnerability, which was classified as critical, was found in parse-community parse-server up to 8.6.70/9.7.0. Affected is an unknown function of the component HTTP Range Request Handler. Executing a manipulation can lead to improper authorization.

This vulnerability is handled as CVE-2026-34784. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.