Live › vulnerability › CVE-2026-79633
Go to dashboardApache Answer through 2.0.2 lacks authorization checks on some actions, so a logged-in user can act on non-public content they should not reach. An attacker gets unauthorized access to restricted content for any account they can register or hold.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running Apache Answer up to and including 2.0.2 are affected, where authenticated users can reach non-public content. Instances on or later are not affected by this issue. Whether a deployment is exposed depends on which accounts can log in and what content is marked non-public, which the sources do not detail.
2.0.3No product ranges from the sources yet.
2.0.32.0.3 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.0.2.
Missing authorization checks allowed authenticated users to perform actions on non-public content they were not permitted to access.
Users are recommended to upgrade to version 2.0.3, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-79633")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.