Skip to content
OpenAdvisories

Product · Adalo No-Code App Builder

App Builder

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-10706

    Exposure of Sensitive Information to an Unauthorized attacker

    In Adalo’s no-code app builder, (Versions 1 and 2) the attackers may extract full user records and correlate user behavior across multiple applications via dbId enumeration. The platform does not implement data minimization, privacy by design, or implement ap…

    Adalo No-Code App Builder App Builder
  • High 7.5
    CVE-2026-10708

    Insufficiently Protected Credentials

    This vulnerability enables large‑scale data harvesting without requiring app‑specific secrets. A single request to a minimal leaderboard component may return user records containing emails, UUIDs, and custom fields. The combination of wildcard CORS behavior, …

    Adalo No-Code App Builder App Builder