As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-71563: Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questions
CVE-2026-71563 is a missing authorization vulnerability in Apache Answer through version 2.0.2 that allows holders of a global application programming interface (API) key to retrieve answer content from non-public questions, including hidden, deleted, or pending-review items. The vendor released version 2.0.3 to address the flaw.
Why it matters: Organizations running Apache Answer 2.0.2 or earlier with API key holders should upgrade immediately, as the vulnerability exposes question content that should be restricted from view.
- Source published
- First seen by Cybersecurity Tracker