JP

Cybersecurity / Vulnerability research

Jess Parker

Senior Cybersecurity Engineer

I’m a senior cybersecurity engineer working across security engineering, penetration testing, and vulnerability research. My experience includes network and Active Directory security, supported by hands-on skills in reconnaissance, enumeration, exploitation, privilege escalation, and technical reporting.

Explore the research Sacramento, California

Published work

Vulnerability research

Publicly documented findings, with credits and source records.
Listed from newest to oldest.

  1. CWE-862
    CVE-2026-68484CVSS 4.0 9.0 Critical

    Sage AR Automation

    Missing authorization in administrative functions

    An improper authorization vulnerability in the Cash Collect API allows authenticated, low-privileged users to gain administrator privileges.

    Reported by Jess Parker

    CVE record Vendor release notes
  2. CWE-639
    CVE-2026-67403CVSS 4.0 9.0 Critical

    Sage AR Automation

    Cross-tenant access to administrative resources

    Insufficient tenant-level authorization in the Cash Collect API allows authenticated users to access administrative resources belonging to other tenants.

    Reported by Jess Parker

    CVE record Vendor release notes
  3. CWE-89
    CVE-2026-2409CVSS 4.0 9.3 Critical

    Delinea Cloud Suite

    SQL injection in Cloud Suite

    A SQL injection vulnerability allowing argument injection affects Delinea Cloud Suite versions before 25.2 HF1.

    Finders: Jess Parker and Radu Enachi

    CVE record Vendor release notes

Summaries are based on public CVE records. Severity scores are the assigning authority’s CVSS 4.0 ratings. See the linked records and vendor release notes for authoritative details.