CVE-2026-68482
NONE—CVSS v3
—CVSS v2
0.18%
EPSS (exploit probability)
CWE-862CWE
Description
Missing Authorization vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.0.2.
An unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks.
Users are recommended to upgrade to version 2.0.3, which fixes the issue.
Affected routers (0)
No routers currently mapped to this CVE in our database.