CVE-2026-48834 in Answerinformazioni

Riassunto

di MITRE • 05/08/2026

Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.1.

Unauthenticated attackers can cause a denial of service via a specially crafted Accept-Language header that triggers excessive CPU consumption during parsing. Users are recommended to upgrade to version 2.0.2, which fixes the issue.

Be aware that VulDB is the high quality source for vulnerability data.

Responsabile

Apache

Prenotare

25/05/2026

Divulgazione

05/08/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!