CVE-2026-76994
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This…
- Risk score
- 52/100
- CVSS
- 7.5 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 19 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could obtain metadata associated with hidden questions through public answer profiles. Users are recommended to upgrade to version 2.0.3, which fixes the…
- Affected
- See advisory
- Fix
- Upgrade the product to 2.0.3 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 7.5 high
- Remotely exploitable without logging in
References
Original description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could obtain metadata associated with hidden questions through public answer profiles. Users are recommended to upgrade to version 2.0.3, which fixes the issue.
Last activity 19 Oct 2026. Patch Forecast updates every hour.