CVE-2026-79620

Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions. Users are recommended to...

CVE-2026-79620

The Apache Answer software (versions through 2.0.2 ) contains a vulnerability where an improper authorization check in the similar-question search functionality allows authenticated users to view the metadata of non-public questions . This results in the exposure of sensitive information through ...

CVE-2026-79620 Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata

Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions. Users are recommended to...

EUVD-2026-104161

Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions. Users are recommended to...

tap-ducky

TapDucky - Android USB HID Keystroke Injector TapDucky - Android USB HID Keystroke Injector Open-source DuckyScript runner for rooted Android with USB Gadget ConfigFS support TapDucky lets you create, customize, schedule, and run DuckyScript on Android by emulating a USB keyboard, mouse, or...

CVE-2026-79613

The Apache Answer software versions through 2.0.2 are vulnerable to a security flaw where unauthenticated attackers can access comments associated with non-public content by navigating through public user profiles. This vulnerability is classified under CWE-202 (Exposure of Sensitive Information ...

EUVD-2026-104160

vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with non-public content through public user profiles. Users are recommended to upgrade to version 2.0.3, which fixes the issue...

CVE-2026-79613 Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles

vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with non-public content through public user profiles. Users are recommended to upgrade to version 2.0.3, which fixes the issue...

CVE-2026-79613

vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with non-public content through public user profiles. Users are recommended to upgrade to version 2.0.3, which fixes the issue...

CVE-2026-76994

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could obtain metadata associated with hidden questions through public answer profiles. Users are recommended to upgrade to version...

CVE-2026-76994

The Apache Answer software, in versions through 2.0.2 , is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200). This security flaw allows unauthenticated attackers to obtain metadata associated with hidden questions by accessing public answer profiles. To remedia...

EUVD-2026-104159

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could obtain metadata associated with hidden questions through public answer profiles. Users are recommended to upgrade to version...

CVE-2026-76994 Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could obtain metadata associated with hidden questions through public answer profiles. Users are recommended to upgrade to version...

CVE-2026-71563 Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questions

Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An authorization flaw in the MCP answer retrieval tool allows holders of a global API key to access answer content associated with hidden, deleted, or pending-review questions. Users are...

CVE-2026-71563

Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An authorization flaw in the MCP answer retrieval tool allows holders of a global API key to access answer content associated with hidden, deleted, or pending-review questions. Users are...

EUVD-2026-104158

Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An authorization flaw in the MCP answer retrieval tool allows holders of a global API key to access answer content associated with hidden, deleted, or pending-review questions. Users are...

CVE-2026-71563

Apache Answer versions through 2.0.2 are vulnerable to a missing authorization flaw (CWE-862) in the MCP answer retrieval tool . This vulnerability allows individuals possessing a global API key to access content from hidden, deleted, or pending-review questions . To remediate this issue, users a...

CVE-2026-68482

Apache Answer versions through 2.0.2 are vulnerable to a missing authorization (CWE-862) flaw in the question invite user lookup. Due to missing visibility authorization checks, an unauthenticated or unauthorized user can retrieve the invited-user list for questions that are not public. To mitiga...

CVE-2026-68482

Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks. Users are recommended to upgrade ...

EUVD-2026-104157

Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks. Users are recommended to upgrade ...