Apache answer

This hub aggregates every CVE we track for Apache answer, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Apache answer.

• CVE-2026-60053Apache Answer: Residual Administrative API Key Access After Role or Account Revocation9.1Aug 5, 2026
• CVE-2026-60023Apache Answer: Unauthorized disclosure of deleted or pending answer content7.5Aug 5, 2026
• CVE-2026-50749Apache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisions6.5Aug 5, 2026
• CVE-2026-48912Apache Answer: Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URL6.5Aug 5, 2026
• CVE-2026-48911Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow7.5Aug 5, 2026
• CVE-2026-48834Apache Answer: Denial of service via crafted Accept-Language header parsing7.5Aug 5, 2026
• CVE-2026-25700Apache Answer: AdminToken not invalidated after admin deactivation7.2Jun 10, 2026
• CVE-2026-34905Apache Answer: Unlisted Questions Accessible via Direct API Access6.5Jun 9, 2026
• CVE-2026-34033Apache Answer: HTML Content Injection in Email5.4Jun 9, 2026
• CVE-2026-34031Apache Answer: The custom avatar was not properly validated6.5Jun 9, 2026
• CVE-2026-33582Apache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error6.5Jun 9, 2026
• CVE-2026-25699Apache Answer: Authorization Bypass in Timeline API6.1Jun 9, 2026
• CVE-2026-25688Apache Answer: XSS in AI Answer Rendering6.1Jun 9, 2026
• CVE-2026-24735Apache Answer: Revision API Improper Access Control leads to Information Disclosure7.5Feb 4, 2026
• CVE-2025-29868Apache Answer: Using externally referenced images can leak user privacy.6.5Apr 1, 2025