CVE-2026-60053

CVE-2026-60053 affects Apache Answer up to version 2.0.1. The issue is an insufficient session expiration that left Administrative API keys usable after the owning administrator was demoted or the account marked inactive, suspended, or deleted, enabling continued access until keys are removed. Th...