agentprime: apache-software-foundation-apache-answerEvery new CVE for apache-software-foundation-apache-answer.https://agentprime.io/CVE-2026-90910: Apache Answer: Reaction API authorization bypass for restricted contenthttps://agentprime.io/advisories/CVE-2026-90910/https://agentprime.io/advisories/CVE-2026-90910/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:35:54 GMTCVEcriticalCVE-2026-86589: Apache Answer: User Center integration does not revoke first-login sessions after central account suspensionhttps://agentprime.io/advisories/CVE-2026-86589/https://agentprime.io/advisories/CVE-2026-86589/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:35:27 GMTCVECVE-2026-79633: Apache Answer: Missing Authorization Allows Mutations of Non-Public Contenthttps://agentprime.io/advisories/CVE-2026-79633/https://agentprime.io/advisories/CVE-2026-79633/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:35:05 GMTCVECVE-2026-79624: Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session Revocationhttps://agentprime.io/advisories/CVE-2026-79624/https://agentprime.io/advisories/CVE-2026-79624/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:34:39 GMTCVEcriticalCVE-2026-79620: Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadatahttps://agentprime.io/advisories/CVE-2026-79620/https://agentprime.io/advisories/CVE-2026-79620/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:34:11 GMTCVECVE-2026-79613: Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profileshttps://agentprime.io/advisories/CVE-2026-79613/https://agentprime.io/advisories/CVE-2026-79613/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:33:52 GMTCVECVE-2026-76994: Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profileshttps://agentprime.io/advisories/CVE-2026-76994/https://agentprime.io/advisories/CVE-2026-76994/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:33:14 GMTCVECVE-2026-71563: Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questionshttps://agentprime.io/advisories/CVE-2026-71563/https://agentprime.io/advisories/CVE-2026-71563/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:32:40 GMTCVECVE-2026-68482: Apache Answer: Improper Authorization in Question Invite User Lookuphttps://agentprime.io/advisories/CVE-2026-68482/https://agentprime.io/advisories/CVE-2026-68482/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:31:50 GMTCVECVE-2026-67249: Apache Answer: Email Code Purpose Confusion May Allow Account Takeoverhttps://agentprime.io/advisories/CVE-2026-67249/https://agentprime.io/advisories/CVE-2026-67249/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:31:20 GMTCVECVE-2026-64945: Apache Answer: Incorrect permission mapping allows users with only the unpin permission to hide/show questionshttps://agentprime.io/advisories/CVE-2026-64945/https://agentprime.io/advisories/CVE-2026-64945/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:30:51 GMTCVECVE-2026-64944: Apache Answer: Stored XSS via unsanitized HTML in imported question contenthttps://agentprime.io/advisories/CVE-2026-64944/https://agentprime.io/advisories/CVE-2026-64944/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:26:52 GMTCVECVE-2026-64943: Apache Answer: API keys logged in plaintext during authenticationhttps://agentprime.io/advisories/CVE-2026-64943/https://agentprime.io/advisories/CVE-2026-64943/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:26:13 GMTCVECVE-2026-60053: Apache Answer: Residual Administrative API Key Access After Role or Account Revocationhttps://agentprime.io/advisories/CVE-2026-60053/https://agentprime.io/advisories/CVE-2026-60053/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 15:13:10 GMTCVEcriticalCVE-2026-60023: Apache Answer: Unauthorized disclosure of deleted or pending answer contenthttps://agentprime.io/advisories/CVE-2026-60023/https://agentprime.io/advisories/CVE-2026-60023/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 15:12:08 GMTCVECVE-2026-50749: Apache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisionshttps://agentprime.io/advisories/CVE-2026-50749/https://agentprime.io/advisories/CVE-2026-50749/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 15:11:05 GMTCVECVE-2026-48912: Apache Answer: Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URLhttps://agentprime.io/advisories/CVE-2026-48912/https://agentprime.io/advisories/CVE-2026-48912/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 15:10:08 GMTCVECVE-2026-48911: Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flowhttps://agentprime.io/advisories/CVE-2026-48911/https://agentprime.io/advisories/CVE-2026-48911/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 15:09:14 GMTCVECVE-2026-48834: Apache Answer: Denial of service via crafted Accept-Language header parsinghttps://agentprime.io/advisories/CVE-2026-48834/https://agentprime.io/advisories/CVE-2026-48834/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 15:07:35 GMTCVE