MEDIUMCVSS v3.1 4.3Vulnerability
CVE-2026-71563
Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An authorization flaw in the MCP answer retrieval tool allows holders of a global API key to access answer content associated with hidden, deleted, or pending-review questions. Users are recommended to upgrade to version 2.0.3, which fixes the issue.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Cvss severity
- MEDIUM
- Cvss score
- 4.3
- Epss score
- 0.00162
- Retrieved at
- 2026-10-21T01:24:50+00:00
- Last source
- FIRST EPSS
- Score
- 4.3
- Cvss version
- 3.1
- Cve id
- CVE-2026-71563
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- First seen by Signal
- 2026-10-19T11:09:13+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Published at
- 2026-10-19T10:16:48.637
- Last modified
- 2026-10-20T19:18:14.297
- Epss percentile
- 0.04941
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph