What is GHSA-cx9x-h2c8-vhx5?

GHSA-cx9x-h2c8-vhx5 is a security advisory published by GitHub Security Advisories with High severity. In Adalo’s no-code app builder, (Versions 1 and 2) the attackers may extract full user records...

Which CVE IDs does GHSA-cx9x-h2c8-vhx5 cover?

GHSA-cx9x-h2c8-vhx5 covers the following CVE IDs: CVE-2026-10706. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cx9x-h2c8-vhx5?

GHSA-cx9x-h2c8-vhx5 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-cx9x-h2c8-vhx5HighCVSS 7.5

In Adalo’s no-code app builder, (Versions 1 and 2) the attackers may extract full user records...

Vendor

GitHub Security Advisories

Published

July 8, 2026

Last Modified

July 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-10706 →

📋 Description

In Adalo’s no-code app builder, (Versions 1 and 2) the attackers may extract full user records and correlate user behavior across multiple applications via dbId enumeration. The platform does not implement data minimization, privacy by design, or implement appropriate technical safeguards, allowing sensitive information to be exposed to unauthorized parties.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-10706
https://kb.cert.org/vuls/id/849433
https://github.com/advisories/GHSA-cx9x-h2c8-vhx5