CVE-2026-27610Medium· 5.3▾ SunlitParse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the `ConfigKeyCache` uses the same cache key for both master key and read-only master key when resolving function…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.5%
Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the ConfigKeyCache uses the same cache key for both master key and read-only master key when resolving function-typed keys. Under specific timing conditions, a read-only user can receive the cached full master key, or a regular user can receive the cached read-only master key. The fix in version 9.0.0-alpha.8 uses distinct cache keys for master key and read-only master key. As a workaround, avoid using function-typed master keys, or remove the agent configuration block from your dashboard configuration.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116870High· 8.7In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently
CVE-2026-116197Low· 2.6Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection
CVE-2026-114348Medium· 5.3webpack-dev-server: webpack-dev-server: Information disclosure via malformed Host header (CVE-2026-114348)
CVE-2026-47674Medium· 5.3Hono is a Web application framework that provides support for any JavaScript runtime
CVE-2026-107288Low· 3.7Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
CVE-2026-107289Medium· 6.8Pydantic AI is a Python agent framework for building applications and workflows with Generative AI