As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-76994: Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles
CVE-2026-76994 affects Apache Answer through version 2.0.2, allowing unauthenticated attackers to access metadata of hidden questions via public answer profiles. The vendor recommends upgrading to version 2.0.3 to resolve the issue.
Why it matters: Organizations running Apache Answer 2.0.2 and earlier should patch immediately, as any unauthenticated attacker can discover sensitive question metadata without credentials.
- Source published
- First seen by Cybersecurity Tracker