CVE-2026-48911: Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow

<p>Posted by Enxin Xie on Aug 05</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache Answer through 2.0.1<br /> <br /> Description:<br /> <br /> Insufficient Verification of Data Authenticity vulnerability in Apache Answer.<br /> <br /> This issue affects Apache Answer: through 2.0.1.<br /> <br /> A missing authorization check in the external-login email binding flow allow