CVE-2026-68482: Apache Answer 0 through 2.0.2

Affected technology

Apache Answer · 0 through 2.0.2
Apache Software Foundation

Component: Not specified by the source

What an attacker can do

An unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks.

Published 19-Oct-2026 10:37 UTC

CWE: CWE-862
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-19 12:24:32.001504+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-68482.html