CVE-2026-76994 is a vulnerability in Apache Answer through version 2.0.2 that allows unauthenticated attackers to access metadata associated with hidden questions via public answer profiles. This exposure of sensitive information could lead to confidentiality breaches. The issue is fixed in version 2.0.3.