What is CVE-2026-10706?

CVE-2026-10706 is a high-severity vulnerability in Adalo No-code App Builder, classified under CWE-200 EXPOSURE OF SENSITIVE INFORMATION TO AN UNAUTHORIZED ACTOR. CVSS score: 7.5/10. Published 2026-07-08.

How severe is CVE-2026-10706?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Adalo No-code App Builder

CVE-2026-10706

In Adalo’s no-code app builder, (Versions 1 and 2) the attackers may extract full user records and correlate user behavior across multiple applications via dbId enumeration. The platform does not implement data minimization, privacy by des…

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Adalo No-code App Builder — versions 1

References

cret@cert.org

Frequently asked questions

What is CVE-2026-10706?: CVE-2026-10706 is a high-severity vulnerability in Adalo No-code App Builder, classified under CWE-200 EXPOSURE OF SENSITIVE INFORMATION TO AN UNAUTHORIZED ACTOR. CVSS score: 7.5/10. Published 2026-07-08.
How severe is CVE-2026-10706?: High severity. CVSS v3 base score is 7.5 out of 10.