CVE-2026-25699

mediumCVSS 6.1covered by 1 sourcefirst seen 2026-06-09

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and its revision history. Users are recommended to upgrade to version 2.0.1, which fixes the issue.

⚡ Watch CVE-2026-25699

Get an email if CVE-2026-25699 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all EPSS-scored CVEs.

Advisory coverage (1)

mediumGHSA-w754-5646-xq9j: Apache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vu…ghsa · 2026-06-09

External references

NVD record for CVE-2026-25699

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-25699 status](https://www.csirts.com/badge/CVE-2026-25699)](https://www.csirts.com/cve/CVE-2026-25699)