Live › vulnerability › CVE-2026-79613
Go to dashboardApache Answer through 2.0.2 exposes comments tied to non-public content through public user profiles. An unauthenticated attacker can read those comments without logging in.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running Apache Answer 2.0.2 or earlier are exposed when they hold non-public content that has comments. Instances that only publish public content, or that run a version newer than 2.0.2, are not affected by this flaw as described.
No product ranges from the sources yet.
2.0.32.0.3 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.0.2.
Unauthenticated attackers could access comments associated with non-public content through public user profiles.
Users are recommended to upgrade to version 2.0.3, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-79613")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.