CVE-2026-76994

The Apache Answer software, in versions through 2.0.2 , is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200). This security flaw allows unauthenticated attackers to obtain metadata associated with hidden questions by accessing public answer profiles. To remedia...

CVE-2026-76994 Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could obtain metadata associated with hidden questions through public answer profiles. Users are recommended to upgrade to version...