Critical Alert 1 Active Exploit Detected Today

CVE-2026-10520 Ivanti Sentry OS Command Injection Vulnerability →
Powered by CVE Watchtower
×

CVE Watchtower


← Back to CVE List

CVE-2026-33582NVD

Vulnerability Summary

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.0.

A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash.
Users are recommended to upgrade to version 2.0.1, which fixes the issue.
Severity Level
MEDIUM(6.5)
Published Date
Jun 9, 2026
Last Modified
Jun 10, 2026
Exploitation Status
????
EPSS Score (30-Day)
0.07%Probability
Root Weakness (CWE)
The software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityNone
IntegrityNone
AvailabilityHigh