VULNERABILITY INTELLIGENCE
CVE-2026-16007
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-08-15
Last modified2026-09-09
Description
AppFlowy's qcuiknote feature is affected by a SQL injection vulnerability. Authenticated users with access to the feature can inject arbitrary SQL to exfiltrate data in the underlying SQL database.
Weakness classification
- ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a: CWE-89