Adalo No-Code App Builder

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Adalo No-Code App Builder records in CISA KEV

No Adalo No-Code App Builder vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-09205 CVE-2026-10706 · GHSA-cx9x-h2c8-vhx5

Exposure of Sensitive Information to an Unauthorized attacker

LOW 39

In Adalo’s no-code app builder, (Versions 1 and 2) the attackers may extract full user records and correlate user behavior across multiple applications via dbId enumeration.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00416 Published 2026-07-08 No fix listed

TI-2026-09206 CVE-2026-10708 · GHSA-gv53-r5jh-4pc3

Insufficiently protected credentials in Adalo No-Code App Builder App Builder

LOW 38

This vulnerability enables large‑scale data harvesting without requiring app‑specific secrets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00205 Published 2026-07-08 No fix listed

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0