By weakness (CWE)

CWE-1259: related vulnerabilities

CVEs classified under CWE-1259. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-25700HIGH 7.2

  Apache Answer versions up to 2.0.0 contain a security flaw where administrative API tokens remain valid even after an administrator account is suspended, deleted, or deactivated. An attacker with knowledge of a revoked admin's token can continue making administrative API calls until the token naturally expires, potentially allowing unauthorized changes to system configuration, user accounts, or sensitive data. The vulnerability requires high privilege (an existing admin account) to initially create the problematic token, but once created, that token persists independently of account status.