CVE-2026-48834 is a denial of service vulnerability in Apache Answer versions through 2.0.1. It arises from improper handling of length parameter inconsistencies in the Accept-Language header, allowing unauthenticated attackers to cause excessive CPU consumption during parsing. The issue is fixed in version 2.0.2.