CVE-2026-76994: Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles
Unauthenticated users can pull hidden-question metadata from Apache Answer public profiles.
36
CVE-2026-76994
- CVSS
- —
- EPSS
- —
- Published
- ·
- Modified
Description · NVD
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could obtain metadata associated with hidden questions through public answer profiles. Users are recommended to upgrade to version 2.0.3, which fixes the issue.
- Weakness
- CWE-200