Sensitive Information Exposure in Apache Answer
CVE-2026-76994

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Answer
Vendor
CVE Published:
19 October 2026

What is CVE-2026-76994?

A vulnerability in Apache Answer allows unauthenticated attackers to access sensitive metadata linked to hidden questions via public answer profiles. This exposure can lead to unauthorized information disclosure, potentially compromising user privacy and data security. It is advised to update to version 2.0.3 to mitigate this risk.

Affected Version(s)

Apache Answer 0 <= 2.0.2

References

https://lists.apache.org/thread/b9whow167cr0lkhqk6xzk0c2b...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

sec-reex
.