Skip to content

CVE record · 1 source

CVE-2026-79624

Insufficient session expiration vulnerability in Apache Answer.

Vendor: Apache Software Foundation
Product: Other Apache projects
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

10

CVE NVD 12d ago

Insufficient session expiration vulnerability in Apache Answer.

Insufficient session expiration vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Insufficient session invalidation allowed revoked users to continue accessing known private uploaded files with a…

Fix available CVE-2026-79624 Apache Software Foundation