https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:50:42.720072+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-16007 CVE-2026-16007 — Authenticated SQL Injection in AppFlowy 2026-10-05T07:50:42.736509+00:00

Affected: AppFlowy-IO AppFlowy-Cloud

AppFlowy's qcuiknote feature is affected by a SQL injection vulnerability. Authenticated users with access to the feature can inject arbitrary SQL to exfiltrate data in the underlying SQL database.