CVE-2026-67249

Not scored yetLast modified Oct 19, 2026

Description

A vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.2.

A verification code issued for one email-based workflow could be accepted by another sensitive workflow because the code purpose was not properly enforced.

Users are recommended to upgrade to version 2.0.3, which fixes the issue.

Metrics

No CVSS score has been published yet.

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Oct 19, 2026
Last modified
Oct 19, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-67256.4The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the `wpCVE-2026-67267.9An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privilegCVE-2026-672607.3Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by the scheduler. That sweeCVE-2026-672619.8Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in CVE-2026-672628.1Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability toCVE-2026-672665.5Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local aCVE-2026-672675.5Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vuCVE-2026-672686.5Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low prCVE-2026-672699.9Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContaCVE-2026-67275.9A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM comCVE-2026-672707.4Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-serverCVE-2026-672719.8Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could poten
CVE-2026-67249: Unscored | Vulnix