CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-68482: Apache Answer: Improper Authorization in Question Invite User Lookup

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10490

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-68482: Apache Answer: Improper Authorization in Question Invite User Lookup

CVE-2026-68482 is a missing authorization vulnerability in Apache Answer through version 2.0.2 that allows unauthenticated or unauthorized users to retrieve invited-user lists for non-public questions. The vulnerability stems from inadequate visibility authorization checks. Apache Answer 2.0.3 resolves the issue.

Why it matters: Organizations running Apache Answer through 2.0.2 should upgrade to 2.0.3 to prevent information disclosure of user invitation data for private questions.

CVEsCVE-2026-68482
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary