As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-79633: Apache Answer: Missing Authorization Allows Mutations of Non-Public Content
CVE-2026-79633 is a missing authorization vulnerability in Apache Answer through version 2.0.2 that permits authenticated users to modify non-public content they lack permission to access. The vendor rates the issue moderate severity and recommends upgrading to version 2.0.3 to resolve the flaw.
Why it matters: Organizations running Apache Answer 2.0.2 or earlier should test and deploy the 2.0.3 patch to prevent authenticated attackers from tampering with restricted content.
- Source published
- First seen by Cybersecurity Tracker