CVE-2026-10706

Name of the Vulnerable Software and Affected Versions Adalo versions 1 through 2

Description Attackers can extract complete user records and correlate user behavior across multiple applications through the enumeration of the dbId variable. This occurs because the platform lacks data minimization, privacy by design, and necessary technical safeguards, which leads to the exposure of sensitive information to unauthorized parties.

Recommendations Update Adalo versions 1 through 2 to a version that implements appropriate technical safeguards and data minimization to prevent dbId enumeration.