Live › vulnerability › CVE-2026-76994
Go to dashboardApache Answer through 2.0.2 leaks metadata about hidden questions through public answer profiles. An unauthenticated attacker can read that metadata.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running Apache Answer through 2.0.2 that have hidden questions. Public answer profiles are the exposed path, so a deployment without hidden questions or with profiles disabled is likely less exposed, but the sources do not confirm this. Sites already on 2.0.3 or later are not affected.
No product ranges from the sources yet.
2.0.32.0.3Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.0.2.
Unauthenticated attackers could obtain metadata associated with hidden questions through public answer profiles.
Users are recommended to upgrade to version 2.0.3, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-76994")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.