CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-79613: Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10487

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-79613: Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles

Apache Answer versions through 2.0.2 contain a vulnerability that allows unauthenticated attackers to access comments tied to non-public content by viewing public user profiles. The issue is resolved in version 2.0.3.

Why it matters: Organizations running Apache Answer through 2.0.2 should upgrade immediately to prevent unauthorized disclosure of comments on restricted content.

CVEsCVE-2026-79613
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary