VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 19, 2026· Updated Oct 19, 2026

CVE-2026-68482

CVE-2026-68482

Description

Missing Authorization vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.2.

An unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks.

Users are recommended to upgrade to version 2.0.3, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Apache/Answerinferred2 versions
    >=2.0.3+ 1 more
    • (no CPE)range: >=2.0.3
    • (no CPE)range: <=2.0.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.

CVE-2026-68482 · VYPR