CVE-2026-67249

EUVD-2026-104156
A vulnerability in Apache Answer.



This issue affects Apache Answer: through 2.0.2.

A verification code issued for one email-based workflow could be accepted by another sensitive workflow because the code purpose was not properly enforced.


Users are recommended to upgrade to version 2.0.3, which fixes the issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
apacheCNA
UNKNOWN
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 6.82%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
apacheanswer
𝑥
≤ 2.0.2
CNA
Common Weakness Enumeration
References
https://lists.apache.org/thread/kbdgj9vzd24zb4r2d9ydqyr6f70rpg0v
http://www.openwall.com/lists/oss-security/2026/10/16/25