VulnSocial

CVE-2026-34905General(apache / answer)

LOWCVSS 6.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The unlisted question feature did not enforce access restrictions on direct API endpoints, allowing authenticated users to discover and access unlisted questions, their answers, comments, and revision history. Users are recommended to upgrade to version 2.0.1, which fixes the issue.

apache CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-200

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • answer

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
apache
Products
answer

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-06-09: 3Technical Details · 2026-06-09: 206-09
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-34905 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The unlisted question fe… https://www.cve.org/CVERecord?id=CVE-2026-34905 ----- Traducción: CVE-2026-34905 Exp… http://infoflow.cloud`

    Post summary

    The post simply references CVE-2026-34905 affecting Apache Answer and links to the public CVE record, without further technical or exploit details.

    0000029
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-34905 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The unlisted question fe… https://www.cve.org/CVERecord?id=CVE-2026-34905

    Post summary

    The post announces CVE‑2026‑34905 in Apache Answer, describing it as an information disclosure affecting versions up to 2.0.0, but provides no PoC, exploit, or patch details.

    00000245
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-34905 CVE-2026-34905 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34905

    Post summary

    The text only repeats the CVE identifier and provides a link to Vulmon without delivering any substantive details or actionable information.

    0000048
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appapacheanswer---

Explore more

Back to dashboardapache CVEsanswer vulnerabilities