CVE-2026-25700

medium Apache
EPSS Score
0.4%
Exploitation probability in 30 days
Top 73% most likely to be exploited
Published: June 10, 2026 (29 days ago)
Last Modified: June 19, 2026
Vendor: Apache
Source: MITRE

Description

Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Previously issued administrative tokens were not invalidated after an administrator account was suspended, deleted, or deactivated, allowing continued access to administrative APIs until the token expired. Users are recommended to upgrade to version 2.0.1, which fixes the issue.

CWE

CWE-1259

Affected Products

Apache Software Foundation Apache Answer

References

🔗 lists.apache.org