CVE-2026-25688

The Apache Answer software (versions through 2.0.0 ) is vulnerable to an Improper Neutralization of Alternate XSS Syntax vulnerability. The root cause is that AI-generated response content is rendered in the browser without proper sanitization, which allows for the execution of malicious scripts ...