Vulnerabilitymedium
CVE-2026-79633: Apache Answer: Missing Authorization Allows Mutations of Non-Public Content
AI summary · grok-4.7Summaries by Vani AI
Apache Answer through 2.0.2 let authenticated users modify non-public content they should not access.
Apache disclosed CVE-2026-79633, a moderate missing-authorization flaw in Apache Answer through 2.0.2. Authenticated users could perform actions on non-public content they were not permitted to access. The issue is fixed in version 2.0.3 and was reported by Luigi Colluto. No in-the-wild exploitation is mentioned.
Key facts
- CVE-2026-79633 affects Apache Answer through 2.0.2.
- Authenticated users could mutate non-public content they were not allowed to access.
- Missing authorization checks are fixed in version 2.0.3.
- Reported by Luigi Colluto; severity rated moderate.
- CVEs
- CVE-2026-79633
- Vendors
- Apache
- Products
- Apache Answer
- Organizations
- Apache Software Foundation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-79633 | vulnerability in Apache Answer | — | — |
From the original article
Posted by Enxin Xie on Oct 15 Severity: moderate Affected versions: - Apache Answer through 2. 0. 2 Description: vulnerability in Apache Answer.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.