CVE-2026-67249

The Apache Answer software is vulnerable to an account takeover via a verification code purpose confusion flaw in versions through 2.0.2 . Because the system fails to properly enforce the purpose of issued email-based verification codes, a code intended for one workflow might be accepted by anoth...