CVE-2026-10706
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Jul 08, 2026
Vendor
unknown
Description
In Adalo’s no-code app builder, (Versions 1 and 2) the attackers may extract full user records and correlate user behavior across multiple applications via dbId enumeration. The platform does not implement data minimization, privacy by design, or implement appropriate technical safeguards, allowing sensitive information to be exposed to unauthorized parties.