THREAT OPS › Threat News › CVE-2026-50749: Apache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisions
CVE-2026-50749: Apache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisions
<p>Posted by Enxin Xie on Aug 05</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache Answer through 2.0.1<br /> <br /> Description:<br /> <br /> Improper Authorization vulnerability in Apache Answer.<br /> <br /> This issue affects Apache Answer: through 2.0.1.<br /> <br /> Any authenticated user can reject arbitrary pending edit-revisions without review permission due to
Indicators of compromise
- CVE-2026-50749cve
Original source: https://seclists.org/oss-sec/2026/q3/447