Security Advisory
CVE-2026-10706
7.5
HIGH
Vulnerability Description
In Adalo’s no-code app builder, (Versions 1 and 2) the attackers may extract full user records and correlate user behavior across multiple applications via dbId enumeration. The platform does not implement data minimization, privacy by design, or implement appropriate technical safeguards, allowing sensitive information to be exposed to unauthorized parties.
Published Date
July 8, 2026
Official Source
NIST NVD Advisory