Authentication Bypass Vulnerability in Apache Answer by Apache
CVE-2026-79613

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Answer
Vendor
CVE Published:
19 October 2026

What is CVE-2026-79613?

A vulnerability in Apache Answer allows unauthenticated attackers to access comments linked to non-public content through publicly available user profiles. This issue affects version 2.0.2 and earlier, enabling potential exposure of sensitive user information. Users are strongly encouraged to upgrade to version 2.0.3 to address this security flaw.

Affected Version(s)

Apache Answer 0 <= 2.0.2

References

https://lists.apache.org/thread/grsm88msk5psc4r5jy5fqmlb5...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

n0mi1k
.