CVE-2026-76994
Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles
- State
- Published
- Severity
- Not scored
- Published
- Oct 19, 2026
- Updated
- Oct 19, 2026
- Reserved
- Aug 20, 2026
Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.0.2.
Unauthenticated attackers could obtain metadata associated with hidden questions through public answer profiles.
Users are recommended to upgrade to version 2.0.3, which fixes the issue.
Scores
The record has no CVSS score.
Weaknesses
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected Products
| Product | Versions |
|---|---|
Apache AnswerApache Software Foundation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.