Authorization Flaw in Apache Answer by Apache Software Foundation
CVE-2026-79633

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Answer
Vendor
CVE Published:
19 October 2026

What is CVE-2026-79633?

The identified issue in Apache Answer permits authenticated users to access and interact with non-public content without proper authorization. This lack of authorization checks in version 2.0.2 could lead to sensitive information exposure and unauthorized actions. Users are strongly advised to upgrade to version 2.0.3 to remediate this vulnerability.

Affected Version(s)

Apache Answer 0 <= 2.0.2

References

https://lists.apache.org/thread/m301yrn0fwgr957q8qzfzt8tp...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Luigi Colluto
.