Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
2 vulnerabilities by Lowcoder
CVE-2026-16753 (GCVE-0-2026-16753)
Vulnerability from nvd – Published: 2026-10-13 19:21 – Updated: 2026-10-13 20:08
VLAI
EPSS
VEX
Title
CVE-2026-16753
Summary
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier.
Severity
No CVSS data available.
Assigner
References
2 references
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2026-10-13T20:08:25.573Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.kb.cert.org/vuls/id/382143"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Lowcoder",
"vendor": "Lowcoder",
"versions": [
{
"lessThanOrEqual": "2.4.10",
"status": "affected",
"version": "2.1.0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-863 Incorrect Authorization",
"lang": "en"
}
]
},
{
"descriptions": [
{
"description": "CWE-639 Authorization Bypass Through User-Controlled Key",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T19:21:10.107Z",
"orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"shortName": "certcc"
},
"references": [
{
"url": "https://github.com/lowcoder-org/lowcoder"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2026-16753",
"x_generator": {
"engine": "VINCE 3.0.50",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2026-16753"
}
}
},
"cveMetadata": {
"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"assignerShortName": "certcc",
"cveId": "CVE-2026-16753",
"datePublished": "2026-10-13T19:21:10.107Z",
"dateReserved": "2026-07-23T13:00:05.196Z",
"dateUpdated": "2026-10-13T20:08:25.573Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-16753 (GCVE-0-2026-16753)
Vulnerability from cvelistv5 – Published: 2026-10-13 19:21 – Updated: 2026-10-13 20:08
VLAI
EPSS
VEX
Title
CVE-2026-16753
Summary
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier.
Severity
No CVSS data available.
Assigner
References
2 references
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2026-10-13T20:08:25.573Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.kb.cert.org/vuls/id/382143"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Lowcoder",
"vendor": "Lowcoder",
"versions": [
{
"lessThanOrEqual": "2.4.10",
"status": "affected",
"version": "2.1.0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-863 Incorrect Authorization",
"lang": "en"
}
]
},
{
"descriptions": [
{
"description": "CWE-639 Authorization Bypass Through User-Controlled Key",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T19:21:10.107Z",
"orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"shortName": "certcc"
},
"references": [
{
"url": "https://github.com/lowcoder-org/lowcoder"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2026-16753",
"x_generator": {
"engine": "VINCE 3.0.50",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2026-16753"
}
}
},
"cveMetadata": {
"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"assignerShortName": "certcc",
"cveId": "CVE-2026-16753",
"datePublished": "2026-10-13T19:21:10.107Z",
"dateReserved": "2026-07-23T13:00:05.196Z",
"dateUpdated": "2026-10-13T20:08:25.573Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}