THREATOPS
THREAT OPSThreat News › CVE-2026-50749: Apache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisions

CVE-2026-50749: Apache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisions

medoss_secPublished 2026-08-05

<p>Posted by Enxin Xie on Aug 05</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache Answer through 2.0.1<br /> <br /> Description:<br /> <br /> Improper Authorization vulnerability in Apache Answer.<br /> <br /> This issue affects Apache Answer: through 2.0.1.<br /> <br /> Any authenticated user can reject arbitrary pending edit-revisions without review permission due to

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/447